Date: Sun, 21 Feb 2010 20:18:29 +0100 From: Niklas Blomdalen <me@najk.com> To: freebsd-questions@freebsd.org Subject: mlock within jail possible for use with proftpd and TLS Message-ID: <9FEFE64E-5B4E-4CB0-B671-E4B516B351A3@najk.com>
next in thread | raw e-mail | index | archive | help
Is it possible to make applications use mlock within jails? Im trying to use proftp with tls inside an jail. If i start it as root with proftpd -d 2, it complains about locking passphrase into memory: operation not permitted. error locking passphrase into memory: Operation not permitted Im using versions FreeBSD 8.0-RELEASE-p2 ProFTPD Version 1.3.2c - mod_tls/2.2.2 here are sysctls settings for jail related settings. security.jail.param.cpuset.id: 0 security.jail.param.host.hostid: 0 security.jail.param.host.hostuuid: 64 security.jail.param.host.domainname: 256 security.jail.param.host.hostname: 256 security.jail.param.children.max: 0 security.jail.param.children.cur: 0 security.jail.param.enforce_statfs: 0 security.jail.param.securelevel: 0 security.jail.param.path: 1024 security.jail.param.name: 256 security.jail.param.parent: 0 security.jail.param.jid: 0 security.jail.enforce_statfs: 2 security.jail.mount_allowed: 0 security.jail.chflags_allowed: 1 security.jail.allow_raw_sockets: 1 security.jail.sysvipc_allowed: 0 security.jail.socket_unixiproute_only: 1 security.jail.set_hostname_allowed: 1 security.jail.jail_max_af_ips: 255 security.jail.jailed: 1 Anyone got any tip? Niklas
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9FEFE64E-5B4E-4CB0-B671-E4B516B351A3>