Date: Mon, 12 Aug 2013 14:09:58 +0200 (CEST) From: =?ISO-8859-1?Q?Trond_Endrest=F8l?= <Trond.Endrestol@fagskolen.gjovik.no> To: David Demelier <demelier.david@gmail.com> Cc: Maciej Suszko <maciej@suszko.eu>, freebsd-questions@freebsd.org Subject: Re: sysvipc only for one jail Message-ID: <alpine.BSF.2.00.1308121407470.90799@mail.fig.ol.no> In-Reply-To: <CAO%2BPfDfunKiUx=2SV678jZqzwWHoVPonUwi_MMyNvSJ_HCiUuQ@mail.gmail.com> References: <CAO%2BPfDe3VDRpK9ALrsvwxBcAyejfN85FRvMLU3Q4CKmMgkG3%2BA@mail.gmail.com> <20130811173341.6d1cb2e7@arsenic> <20130811173630.24ed528c@arsenic> <CAO%2BPfDct3aXrrszdWOOu7KUPaxVKrPvboJJn29ipKUS9pCo%2B_g@mail.gmail.com> <alpine.BSF.2.00.1308121323550.90799@mail.fig.ol.no> <CAO%2BPfDfunKiUx=2SV678jZqzwWHoVPonUwi_MMyNvSJ_HCiUuQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --2055831798-2119261980-1376309398=:90799 Content-Type: TEXT/PLAIN; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT On Mon, 12 Aug 2013 13:57+0200, David Demelier wrote: > 2013/8/12 Trond Endrestøl <Trond.Endrestol@fagskolen.gjovik.no>: > > On Mon, 12 Aug 2013 12:40+0200, David Demelier wrote: > > > >> 2013/8/11 Maciej Suszko <maciej@suszko.eu>: > >> > Maciej Suszko <maciej@suszko.eu> wrote: > >> > [...] > >> >> > >> >> You can specify different params for each jail using _parameters, for > >> >> example: > >> >> > >> >> jail_jailname_params="allow.chflags=1 allow.sysvipc=1" > >> > > >> > Sorry, my mistake - it should be jail_jailname_parameters= of course. > >> > -- > >> > regards, Maciej Suszko. > >> > >> Thanks for your message, > >> > >> However, I could not find this setting in the manual of rc.conf(5) > >> neither in /etc/rc.d/jail :(. It does not seems to be applied. > > > > Have a look at jail(8) and the last lines of /etc/default/rc.conf. > > I see, > > I've added what Maciej Suszko told me but the sysctls in the jail is > not set as it should be : > > security.jail.param.allow.sysvipc: 0 > security.jail.param.allow.chflags: 0 > > And thus, it's not enabled as postgresql tells: > > creating template1 database in /usr/local/pgsql/data/base/1 ... FATAL: > could not create shared memory segment: Function not implemented I'll look into this by creating a new jail for PostgreSQL 9.2 when I get home. -- +-------------------------------+------------------------------------+ | Vennlig hilsen, | Best regards, | | Trond Endrestøl, | Trond Endrestøl, | | IT-ansvarlig, | System administrator, | | Fagskolen Innlandet, | Gjøvik Technical College, Norway, | | tlf. mob. 952 62 567, | Cellular...: +47 952 62 567, | | sentralbord 61 14 54 00. | Switchboard: +47 61 14 54 00. | +-------------------------------+------------------------------------+ --2055831798-2119261980-1376309398=:90799--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1308121407470.90799>