diff --git a/docs/CLAWDIE-INSTALLER-HANDOFF.md b/docs/CLAWDIE-INSTALLER-HANDOFF.md index 5d502e3..509d664 100644 --- a/docs/CLAWDIE-INSTALLER-HANDOFF.md +++ b/docs/CLAWDIE-INSTALLER-HANDOFF.md @@ -92,10 +92,9 @@ Observed results: - bare `apply --pool zroot`: printed the same plan and exited as a dry-run (`DRY-RUN — nothing written`). - `plan --pool does-not-exist`: now errors before rendering/apply: `ZFS pool \`does-not-exist\` not found; available pools: zroot`. -Findings filed for Linux-side review in branch -`fix/clawdie-installer-freebsd-hardening`: +Hardening applied (PR #53): -- generated FreeBSD rc.d now runs `/usr/local/bin/colibri-daemon` through `/usr/sbin/daemon -u clawdie` instead of root; +- generated FreeBSD rc.d runs `/usr/local/bin/colibri-daemon` through `/usr/sbin/daemon -u clawdie` (not root); - service installation chowns `/var/db/clawdie` and `/var/log/clawdie` after creating the `clawdie` user; - existing-pool plans validate the named pool before rendering/applying.