Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Oct 2013 07:06:53 -0500
From:      Mark Felder <feld@FreeBSD.org>
To:        freebsd-jail@freebsd.org
Subject:   Re: /lib/libc.so.7 unsupported file format
Message-ID:  <1381406813.7807.32351005.62A30408@webmail.messagingengine.com>
In-Reply-To: <CAEW%2BogacYBMVQ1kN=qjScCfrkJZiTNc-nRYZ_01d7g--JKGEXw@mail.gmail.com>
References:  <CAEW%2BogaW2VVb%2Bba_rydM9rtTpG_AqaJqTbPJz5Y7rOeoD%2B3coQ@mail.gmail.com> <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> <CAEW%2Boga28yB=i1eBbY8RyVCgsWigjxfNmH=oGX%2BSstuzrZPwkA@mail.gmail.com> <1381406101.2271.32347133.46E044A4@webmail.messagingengine.com> <CAEW%2BogacYBMVQ1kN=qjScCfrkJZiTNc-nRYZ_01d7g--JKGEXw@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 10, 2013, at 7:03, Sami Halabi wrote:
> Hi,
> thanks for replying me so fast.
> 
> what i ment is:
> 1. in the jail (32 bit) to do:
>  freebsd-update fetch
> 
> # ls /var/db/freebsd-update/
> ./
> ../
> f465c3739385890c221dff1a05e578c6cae0d0430e46996d319db7439f884336-install@
> filelist
> files/
> install.TggE71/
> pub.ssl
> serverlist
> serverlist_full
> serverlist_tried
> tINDEX.present
> tag
> root@sami:/ #
> 
> root@sami:/ # more /var/db/freebsd-update/tag
> freebsd-update|i386|9.1-RELEASE|7|b3924864da0e125ff57d2f9894347dbc0e130ae32a0647126d5109dbc099981e|1420070400
> root@sami:/ #
> 
> 2. since inside the jail:
> root@sami:/ # freebsd-update install
> Installing updates...chflags: ///lib/libc.so.7: Operation not permitted
> root@sami:/ #
> 
> not working because of chflags (maybe there is a sysctl that will allow a
> jail to chflags??)
> 
> i thought that maybe there is some way to do it from outside the jail.
> 
> unfortunattly doing simple:
> root@6:/root # freebsd-update -b /usr/jails/sami -d
> /usr/jails/sami/var/db/freebsd-update/ install
> No updates are available to install.
> Run '/usr/sbin/freebsd-update fetch' first.
> root@6:/root #
> 
> i thought if there is some way to interpret the data and installing using
> the host (maybe manually somehow...), or even changing the chflags inside
> the jail to an executable that return success no matter what...
> 

There is a sysctl for chflags:

security.jail.param.allow.chflags

and you can check if you have that access from within the jail via:

security.jail.chflags_allowed

I have not tried to do what you're attempting before simply because I've
very rarely run 32bit jails on 64bit hosts. Hopefully this gets you in
the right direction.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1381406813.7807.32351005.62A30408>