Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Apr 2006 15:24:26 +0300 (EEST)
From:      Dmitry Pryanishnikov <dmitry@atlantis.dp.ua>
To:        Julian Elischer <julian@elischer.org>
Cc:        "Marc G. Fournier" <scrappy@hub.org>, freebsd-stable@freebsd.org, freebsd-current@freebsd.org, Robert Watson <rwatson@freebsd.org>, pjd@freebsd.org
Subject:   Re: new feature: private IPC for every jail
Message-ID:  <20060404151508.P73219@atlantis.atlantis.dp.ua>
In-Reply-To: <44317A45.9000504@elischer.org>
References:  <20060403003318.K947@ganymede.hub.org> <20060403163220.F36756@fledge.watson.org> <44317A45.9000504@elischer.org>

next in thread | previous in thread | raw e-mail | index | archive | help

Hello!

On Mon, 3 Apr 2006, Julian Elischer wrote:
>> (2) The name space model for system v ipc is flat, so while it's desirable 
>> to
>>     allow the administrator in the host environment to monitor and control
>>     resource use in the jail (for example, delete allocated but unused
>>     segments), doing that requires developing an administrative model for 
>> it.
>
>
> it is possible the admin environment can't see it.
> unless you prefix it with something..

  I think it would be nice if we can just name jail's IPC objects from host
environment using syntax like e.g.

/JID/name_in_jail

or

/jail_IP/name_in_jail

However, I can't find info whether "/" is legal as the 1st character of IPC
object ID. If yes, we should use another prefix. This approach won't work
if there are no restriction on IPC object IDs 1st character. Are there any?


Sincerely, Dmitry
-- 
Atlantis ISP, System Administrator
e-mail:  dmitry@atlantis.dp.ua
nic-hdl: LYNX-RIPE



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060404151508.P73219>