From owner-freebsd-stable@FreeBSD.ORG Mon Apr 3 03:21:31 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D16FF16A420 for ; Mon, 3 Apr 2006 03:21:31 +0000 (UTC) (envelope-from kris@obsecurity.org) Received: from elvis.mu.org (elvis.mu.org [192.203.228.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7D31043D48 for ; Mon, 3 Apr 2006 03:21:31 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from obsecurity.dyndns.org (elvis.mu.org [192.203.228.196]) by elvis.mu.org (Postfix) with ESMTP id 65F881A3C1D; Sun, 2 Apr 2006 20:21:31 -0700 (PDT) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 9A9AB5152B; Sun, 2 Apr 2006 23:21:30 -0400 (EDT) Date: Sun, 2 Apr 2006 23:21:30 -0400 From: Kris Kennaway To: Tom Lane Message-ID: <20060403032130.GA58053@xor.obsecurity.org> References: <26796.1144028094@sss.pgh.pa.us> <20060402225204.U947@ganymede.hub.org> <26985.1144029657@sss.pgh.pa.us> <20060402231232.C947@ganymede.hub.org> <27148.1144030940@sss.pgh.pa.us> <20060402232832.M947@ganymede.hub.org> <20060402234459.Y947@ganymede.hub.org> <27417.1144033691@sss.pgh.pa.us> <20060403031157.GA57914@xor.obsecurity.org> <27515.1144034269@sss.pgh.pa.us> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="AhhlLboLdkugWU4S" Content-Disposition: inline In-Reply-To: <27515.1144034269@sss.pgh.pa.us> User-Agent: Mutt/1.4.2.1i Cc: "Marc G. Fournier" , pgsql-hackers@postgresql.org, freebsd-stable@freebsd.org, Kris Kennaway Subject: Re: [HACKERS] semaphore usage "port based"? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2006 03:21:31 -0000 --AhhlLboLdkugWU4S Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Apr 02, 2006 at 11:17:49PM -0400, Tom Lane wrote: > Kris Kennaway writes: > > On Sun, Apr 02, 2006 at 11:08:11PM -0400, Tom Lane wrote: > >> If this is the story, then FBSD have broken their system and must reve= rt > >> their change. They do not have kernel behavior that totally hides the > >> existence of the other process, and therefore having some calls that > >> pretend it's not there is simply inconsistent. >=20 > > I'm guessing it's a deliberate change to prevent the information > > leakage between jails. >=20 > I have no objection to doing that, so long as you are actually doing it > correctly. This example shows that each jail must have its own SysV > semaphore key space, else information leaks anyway. By default SysV shared memory is disallowed in jails. Kris --AhhlLboLdkugWU4S Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (FreeBSD) iD8DBQFEMJS6Wry0BWjoQKURAk2eAKC3+8tnCW5pGTmNN7bkiqarXZTw8gCeMXaY Rzcc2FvkkH+61J/iEJuTsPs= =Sxbh -----END PGP SIGNATURE----- --AhhlLboLdkugWU4S--