Date: Tue, 16 Oct 2012 13:51:49 -0700 From: David Wolfskill <david@catwhisker.org> To: freebsd-questions@freebsd.org Subject: IPCS resource access within a down-level jail? Message-ID: <20121016205149.GA1817@albert.catwhisker.org>
next in thread | raw e-mail | index | archive | help
--r5Pyd7+fXNt84Ff3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
[Please include me in responses; I've set Reply-To as a hint. Thanks!]
A colleague had been running a program that makes use of IPCS message
queues in a 7.x/i386 environment.
He was moved to a 32-bit 7.x-based jail instantiated on an 8.x/amd64
host.
Within that jail, "ipcs -a" now fails to come anywhere near close to
reporting what it does outside the jail.
I then performed an experiment: I created a 7.x/i386 jail on my
9.x/i386 laptop. I verified that "ipcs -a" (outside the jail) shows
Stuff:
d134(9.1-P)[1] ipcs -a
Message Queues:
T ID KEY MODE OWNER GROUP CREATOR CGROUP =
CBYTES QNUM QBYTES LSPI=
D LRPID STIME RTIME CTIME =20
Shared Memory:
T ID KEY MODE OWNER GROUP CREATOR CGROUP =
NATTCH SEGSZ CPID LPID ATIME DTIME CTIM=
E =20
m 393216 0 --rw------- david david david david =
2 393216 3671 3147 8:23:37 no-entry 8:2=
3:37
m 851969 0 --rw------- david david david david =
2 262080 3861 3147 9:24:09 no-entry 9:2=
4:09
m 458754 0 --rw------- david david david david =
2 384000 3861 3147 9:24:09 no-entry 9:2=
4:09
Semaphores:
T ID KEY MODE OWNER GROUP CREATOR CGROUP =
NSEMS OTIME CTIME =20
d134(9.1-P)[2]=20
Inside the jail, using the 7.x version of ipcs, I get:
%ipcs -a
ipcs: sysctlbyname: kern.ipc.msqids: Cannot allocate memory
%
I then recompiled the 9.x versions of ipcs & ipcrm and linked them
statically; running that verion of ipcs, I see:
%~/bin/!!
~/bin/ipcs -a
Message Queues:
T ID KEY MODE OWNER GROUP CREATOR CGROUP =
CBYTES QNUM QBYTES LSPI=
D LRPID STIME RTIME CTIME =20
Shared Memory:
T ID KEY MODE OWNER GROUP CREATOR CGROUP =
NATTCH SEGSZ CPID LPID ATIME DTIME CTIM=
E =20
m 393216 0 --rw------- david david david david =
2 393216 3671 3147 15:23:37 no-entry 15:2=
3:37
m 655362 0 --rw------- david david david david =
2 262080 3861 3147 18:39:30 no-entry 18:3=
9:30
Semaphores:
T ID KEY MODE OWNER GROUP CREATOR CGROUP =
NSEMS OTIME CTIME =20
%
Is this (inability to access IPCS resources properly within a
"down-level" jail) expected behavior?
Is there a sane(?) way to provide IPCS resources inside a down-level
jail?
Thanks!
Peace,
david
--=20
David H. Wolfskill david@catwhisker.org
Taliban: Evil men with guns afraid of truth from a 14-year old girl.
See http://www.catwhisker.org/~david/publickey.gpg for my public key.
--r5Pyd7+fXNt84Ff3
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
iEYEARECAAYFAlB9yOQACgkQmprOCmdXAD3zMACeN5e1MYbb9Cl60uujvmZeJuqy
nNUAnji0HeQwQs4qjYiwW02e5R7jBVt3
=LNQN
-----END PGP SIGNATURE-----
--r5Pyd7+fXNt84Ff3--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20121016205149.GA1817>