Use varnish user/group in SMF with proper privileges

[Filip Hajny <filip%joyent.com@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Filip Hajny <filip%joyent.com@localhost>
Pushed By:	fhajny
Date:		Sun Mar 19 16:45:15 2017 +0000
Changeset:	2cdd9a33ea11718a1517e8dc2ac092f7332a5b2c

Modified Files:
	varnish/files/smf/manifest.xml
	varnish4/files/smf/manifest.xml

Log Message:
Use varnish user/group in SMF with proper privileges

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=2cdd9a33ea11718a1517e8dc2ac092f7332a5b2c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 varnish/files/smf/manifest.xml  | 1 +
 varnish4/files/smf/manifest.xml | 1 +
 2 files changed, 2 insertions(+)

diffs:
diff --git a/varnish/files/smf/manifest.xml b/varnish/files/smf/manifest.xml
index ecf3ed4849..84a0a477a3 100644
--- a/varnish/files/smf/manifest.xml
+++ b/varnish/files/smf/manifest.xml
@@ -11,6 +11,7 @@
       <service_fmri value="svc:/system/filesystem/local" />
     </dependency>
     <method_context>
+      <method_credential user='@VRNUSER@' group='@VRNGROUP@' privileges='basic,net_privaddr' />
       <method_environment>
         <envvar name='PATH' value='@PREFIX@/sbin:@PREFIX@/bin:/sbin:/usr/sbin:/usr/bin' />
       </method_environment>
diff --git a/varnish4/files/smf/manifest.xml b/varnish4/files/smf/manifest.xml
index ecf3ed4849..84a0a477a3 100644
--- a/varnish4/files/smf/manifest.xml
+++ b/varnish4/files/smf/manifest.xml
@@ -11,6 +11,7 @@
       <service_fmri value="svc:/system/filesystem/local" />
     </dependency>
     <method_context>
+      <method_credential user='@VRNUSER@' group='@VRNGROUP@' privileges='basic,net_privaddr' />
       <method_environment>
         <envvar name='PATH' value='@PREFIX@/sbin:@PREFIX@/bin:/sbin:/usr/sbin:/usr/bin' />
       </method_environment>