From owner-freebsd-rc@FreeBSD.ORG  Thu Nov 23 19:50:31 2006
Return-Path: <owner-freebsd-rc@FreeBSD.ORG>
X-Original-To: freebsd-rc@hub.freebsd.org
Delivered-To: freebsd-rc@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 7A6AD16A554
	for <freebsd-rc@hub.freebsd.org>; Thu, 23 Nov 2006 19:50:31 +0000 (UTC)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EC12343DC3
	for <freebsd-rc@hub.freebsd.org>; Thu, 23 Nov 2006 19:49:47 +0000 (GMT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id kANJoN1C044181
	for <freebsd-rc@freefall.freebsd.org>; Thu, 23 Nov 2006 19:50:23 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.13.4/8.13.4/Submit) id kANJoNe9044180;
	Thu, 23 Nov 2006 19:50:23 GMT (envelope-from gnats)
Date: Thu, 23 Nov 2006 19:50:23 GMT
Message-Id: <200611231950.kANJoNe9044180@freefall.freebsd.org>
To: freebsd-rc@FreeBSD.org
From: Laurent LEVIER <llevier@argosnet.com>
Cc: 
Subject: Re: conf/102913: /etc/rc.d/named killall in jailed OS
X-BeenThere: freebsd-rc@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Laurent LEVIER <llevier@argosnet.com>
List-Id: "Discussion related to /etc/rc.d design and implementation."
	<freebsd-rc.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-rc>,
	<mailto:freebsd-rc-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-rc>
List-Post: <mailto:freebsd-rc@freebsd.org>
List-Help: <mailto:freebsd-rc-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-rc>,
	<mailto:freebsd-rc-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Nov 2006 19:50:31 -0000

The following reply was made to PR conf/102913; it has been noted by GNATS.

From: Laurent LEVIER <llevier@argosnet.com>
To: Yar Tikhiy <yar@comp.chem.msu.su>
Cc: bug-followup@freebsd.org,freebsd-rc@freebsd.org
Subject: Re: conf/102913: /etc/rc.d/named killall in jailed OS
Date: Thu, 23 Nov 2006 20:42:40 +0100

 At 13:11 23/11/2006, Yar Tikhiy wrote:
 >On Fri, Oct 13, 2006 at 08:59:44AM +0200, Laurent LEVIER wrote:
 > >
 > > I already patched my script.
 > > Now it kills pid, then if it fails, gets all named out of jail (J
 > > flag) and kill these.
 >
 >FWIW, I've just added a new little feature to pkill(1): now it can
 >selectively kill processes out of jail.  Perhaps it can be useful
 >here.  If you need to kill all nameds that are not in jail, just
 >use the following command:
 >
 >         pkill -j none named
 >
 >BTW, for the opposite effect, now the following command should be
 >used:
 >
 >         pkill -j any named
 Great. This way the patch will be included in the next release, 
 solving the issue for all.
 
 Thanks for this great work!
 
 Brgrds
 
 Laurent LEVIER
 Systems & Networks Security Expert, CISSP CISM