From owner-freebsd-stable@FreeBSD.ORG  Sun Sep 21 22:24:30 2008
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 28C961065671
	for <freebsd-stable@FreeBSD.org>; Sun, 21 Sep 2008 22:24:30 +0000 (UTC)
	(envelope-from jcw@highperformance.net)
Received: from mx1.highperformance.net (dsl081-163-121.sea1.dsl.speakeasy.net
	[64.81.163.121])
	by mx1.freebsd.org (Postfix) with ESMTP id E68868FC12
	for <freebsd-stable@FreeBSD.org>; Sun, 21 Sep 2008 22:24:24 +0000 (UTC)
	(envelope-from jcw@highperformance.net)
Received: from w16.stradamotorsports.com (w16.stradamotorsports.com
	[192.168.1.16])
	by mx1.highperformance.net (8.13.8/8.13.8) with ESMTP id m8LMOM3s022565;
	Sun, 21 Sep 2008 15:24:22 -0700 (PDT)
	(envelope-from jcw@highperformance.net)
Message-ID: <48D6C995.7060606@highperformance.net>
Date: Sun, 21 Sep 2008 15:24:21 -0700
From: "Jason C. Wells" <jcw@highperformance.net>
User-Agent: Thunderbird 2.0.0.4pre (X11/20080205)
MIME-Version: 1.0
To: Jeremy Chadwick <koitsu@FreeBSD.org>
References: <48D68FD6.50804@highperformance.net>
	<20080921215113.GB9494@icarus.home.lan>
In-Reply-To: <20080921215113.GB9494@icarus.home.lan>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-4.4 required=2.5 tests=ALL_TRUSTED,BAYES_00 
	autolearn=failed version=3.1.6
X-Spam-Checker-Version: SpamAssassin 3.1.6 (2006-10-03) on 
	s4.stradamotorsports.com
Cc: freebsd-stable <freebsd-stable@FreeBSD.org>
Subject: Re: Installworld deletes libc
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 21 Sep 2008 22:24:30 -0000

Jeremy Chadwick wrote:
> On Sun, Sep 21, 2008 at 11:17:58AM -0700, Jason C. Wells wrote:
>> I have the problem similar to one described in 20071024 UPDATING.  The  
>> build is running inside a jail. The system is 6.2-RELEASE. I supped this  
>> moring.  I have the correct lib/Makefile.  During installworld I receive  
>> an error:
>>
>> install: /lib/libc.so.6: chflags: Operation not permitted
>> *** Error code 71
>>
>> Stop in /usr/src/lib/libc.
>>
>> My situation is different in the libc is erased in the process.  Copying  
>> the new libc.so.6 from /usr/obj does not fix the problem.
>>
>> Any ideas?
> 
> Sounds like kern.securelevel is in the way.  See security(7).

The securelevel would normally prevent the deletion of a file.  The 
secure level of this jail is -1 in any case so the schg flag should be 
ignored. security.jail.chflags_allowed=0 seems to supersede the 
securelevel according to sysctl(8).

Some part of installworld is misbehaving in the jail. The security 
mechanisms in securelevel and security.jail.chflags_allowed are not working.

Regards,
Jason