From owner-freebsd-hackers@FreeBSD.ORG Sat Nov 27 22:19:28 2004 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EB1CE16A4CE for ; Sat, 27 Nov 2004 22:19:28 +0000 (GMT) Received: from bsdhosting.net (bsdhosting.net [65.39.221.113]) by mx1.FreeBSD.org (Postfix) with SMTP id 6989F43D48 for ; Sat, 27 Nov 2004 22:19:28 +0000 (GMT) (envelope-from jhopper@bsdhosting.net) Received: (qmail 82932 invoked from network); 27 Nov 2004 22:19:26 -0000 Received: from unknown (HELO ?192.168.1.2?) (jhopper@bsdhosting.net@65.39.221.113) by bsdhosting.net with SMTP; 27 Nov 2004 22:19:26 -0000 From: Justin Hopper To: freebsd-hackers@freebsd.org In-Reply-To: <20041126193800.GB11747@metro.cx> References: <20041126193800.GB11747@metro.cx> Content-Type: text/plain Message-Id: <1101593965.15634.432.camel@work.gusalmighty.com> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Sat, 27 Nov 2004 14:19:26 -0800 Content-Transfer-Encoding: 7bit Subject: Re: Jail + sysv shmem X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Nov 2004 22:19:29 -0000 On Fri, 2004-11-26 at 11:38, Koen Martens wrote: > Hello Hackers, > > For a while i've been wanting shared memory to be usable withing jails, > but with cross-jail protection. Ie. shared memory is restricted to a > jail. > > Recently I've been digging a bit in the freebsd kernel source code > (which is new to me, been doing quite some linux kernel hacking though). > It looks like this is actually not _that_ difficult to implement. > > So, did anyone try this yet? Any pointers? > I know that Pawel @ http://garage.freebsd.pl has a patch for making private SysV IPC memory spaces for the host system and each jail: http://garage.freebsd.pl/privipc.README The patch is against 4.x though, and I've never tried it. I would really like to see something like this implemented for 5.x though. Does anyone know if there are plans to implement this in the future 5.x releases? If not, I would be interested in helping anyone that wishes to try implementing this in 5.3 soon, as we have a lot of clients who ask for SysV IPC inside of jailed hosting environments. Or perhaps there is a new IPC implementation that FreeBSD is looking at and perhaps they will dump SysV IPC altogether? -- Justin Hopper UNIX Systems Engineer BSDHosting.net Hosting Division of Digital Oasys Inc. http://www.bsdhosting.net