JdeBP · @JdeBP
17 followers · 124 posts · Server tty0.social

(...continued)
Other service managers also supply service definitions that run these services. Mark Heily's relaunchd does, for example:

github.com/mheily/relaunchd/bl

There are no doubt others, that I am not aware of.

I recommend that you disable these services whatever service management system you use.

#pcbsd

Last updated 1 year ago

JdeBP · @JdeBP
17 followers · 123 posts · Server tty0.social

(...continued)
PC-BSD/TrueOS runs these things out of the box, itself, of course.

These services are enabled/disabled with settings in /etc/rc.conf.pcbsd which you will need to adjust if you are using that, or override in /etc/rc.conf.local:

syscache_enable="NO"
appcafe_enable="NO"

I have ensured that the external configuration import system in the nosh toolkit also ignores these settings, in the forthcoming service fix. Set them to "NO" anyway.


(continued...)

#pcbsd

Last updated 1 year ago

JdeBP · @JdeBP
17 followers · 122 posts · Server tty0.social

(...continued)
My nosh toolkit has service bundles for these services, and enables them if you set it up for PC-BSD/TrueOS. I have changed this to disabled, as a service fix in the next release.

For a local fix, use a /etc/system-control/presets/20-TrueOS.preset file to preset to disabled all of these services:

disable syscache.service
disable appcafe-*.service

Then explicitly stop and disable the various services with system-config stop and system-config disable.

(continued...)

#pcbsd

Last updated 1 year ago

JdeBP · @JdeBP
17 followers · 121 posts · Server tty0.social

(...continued)
Some PC-BSD/TrueOS repositories on GitHub have been marked archived. However, this particular one is gone completely, as also is the account that owned it.

It is completely hijackable, and the PBI utility will merrily try to pull and use stuff from it, with superuser access.

If you have an old PC-BSD/TrueOS machine that is running or could be run, I recommend disabling all syscache-daemon and appcafe-* services.

There is no alternative GitHub repository.


(continued...)

#pcbsd

Last updated 1 year ago

JdeBP · @JdeBP
17 followers · 120 posts · Server tty0.social

Details:

The appcafe-* services rely upon the wholly undocumented (and no longer source-available) syscache-daemon program, which is run as a syscache service by stock PC-BSD/TrueOS, and also set up as a service by several service management systems, mine and other people's.

The syscache-daemon program itself regularly spawns the PBI update utility, which in turn pulls, or at least tries to pull, information about packaged applications from a GitHub repository.


(continued...)

#pcbsd

Last updated 1 year ago

JdeBP · @JdeBP
17 followers · 119 posts · Server tty0.social

It's still going to be a while until I can get a new release of the toolset out. There are at least two machines that need replacement parts, still.

So a small security announcement.

I'm presetting the syscache and all appcafe-* services to disabled in the next release, and I advise that you disable any such services on any old PC-BSD/TrueOS machines that you may have, whatever service management is in use.

PBI pulls from a GitHub account that was deleted and is hijackable.

#nosh #pcbsd

Last updated 1 year ago

@numa@mamot.fr est certainement mieux pour apprendre les bonnes pratiques, de plus il existe la distribution et sa communauté pour les débutants (donc Ubuntu n'est plus nécessaire, à mon avis).

De même, concernant mieux vaudrait se tourner vers - anciennement - pour commencer.

Enfin, concernant l'environnement graphique, viens-tu de Windows ou macOS ?

Windows ➡️ ou (plus léger)
macOS ➡️

#gnome #xfce #kde #pcbsd #trueos #freebsd #debianfacile #dflinux #debian

Last updated 7 years ago

@numa@mamot.fr est certainement mieux pour apprendre les bonnes pratiques, de plus il existe la distribution et sa communauté pour les débutants (donc Ubuntu n'est plus nécessaire, à mon avis).

De même, concernant mieux vaudrait se tourner vers - anciennement - pour commencer.

Enfin, concernant l'environnement graphique, viens-tu de Windows ou macOS ?

Windows ➡️ ou (plus léger)
macOS ➡️

#gnome #xfce #kde #pcbsd #trueos #freebsd #debianfacile #dflinux #debian

Last updated 7 years ago