lang/erlang: enhance epmd security

[olgeni]

Summary

• Add dedicated beam user (UID/GID 372) for non-root execution
• Use daemon(8) for epmd process supervision and auto-restart

This addresses security concerns with epmd running as root by
providing privilege separation and automatic restart capability.

PR: 213001

[olgeni]

Daemon fixed!

[dch]

\o/ a long overdue improvement! thanks!

[dch]

service start|stop epmd fails when flags are provided:

# /etc/rc.conf.d/epmd
epmd_enable=YES
epmd_flags="-address 100.64.0.0"

# service epmd start
/usr/local/etc/rc.d/epmd: DEBUG: run_rc_command: doit:  limits -C daemon  su -m beam -c 'sh -c " /usr/sbin/daemon -address 100.64.0.0 -f -r -P /var/run/epmd/epmd.pid /usr/local/bin/epmd -address 100.64.0.0"'
daemon: invalid option -- a

A solution is to s/flags/opts/ and then the flags are not passed through to daemon itself.

Otherwise LGTM!

lang/erlang/files/epmd.in

39

probably install -m 644 -g ${epmd_user} -o ${epmd_user} ${pidfile} is tidier than touch+chown.

[olgeni]

Better :)

[dch]

{F120959715} perfect, ship it!