From nobody Sat Aug 24 10:02:23 2024
X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WrXYV3Z3Kz5VX0y
	for <freebsd-questions@mlmmj.nyi.freebsd.org>; Sat, 24 Aug 2024 10:02:38 +0000 (UTC)
	(envelope-from ml@netfence.it)
Received: from soth.netfence.it (mailserver.netfence.it [78.134.96.152])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "mailserver.netfence.it", Issuer "R11" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4WrXYS4Plvz4rMN
	for <freebsd-questions@freebsd.org>; Sat, 24 Aug 2024 10:02:36 +0000 (UTC)
	(envelope-from ml@netfence.it)
Authentication-Results: mx1.freebsd.org;
	none
Received: from [10.1.2.18] (mailserver.netfence.it [78.134.96.152])
	(authenticated bits=0)
	by soth.netfence.it (8.18.1/8.17.2) with ESMTPSA id 47OA2NXY031230
	(version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO);
	Sat, 24 Aug 2024 12:02:23 +0200 (CEST)
	(envelope-from ml@netfence.it)
X-Authentication-Warning: soth.netfence.it: Host mailserver.netfence.it [78.134.96.152] claimed to be [10.1.2.18]
Message-ID: <fce56c0b-c32f-49bf-a3c9-df765fb15bf9@netfence.it>
Date: Sat, 24 Aug 2024 12:02:23 +0200
List-Id: User questions <freebsd-questions.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-questions
List-Help: <mailto:questions+help@freebsd.org>
List-Post: <mailto:questions@freebsd.org>
List-Subscribe: <mailto:questions+subscribe@freebsd.org>
List-Unsubscribe: <mailto:questions+unsubscribe@freebsd.org>
X-BeenThere: freebsd-questions@freebsd.org
Sender: owner-freebsd-questions@FreeBSD.org
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: security.bsd.see_other_uids/gids and jails
Content-Language: en-US
To: doug@fledge.watson.org
Cc: freebsd-questions@freebsd.org
References: <902826c1-fc50-48aa-867d-8010b5814df2@netfence.it>
 <61ed9412-563-a5f-a3c0-66ff23cb5ac4@safeport.com>
 <0fe260da-43ff-4c14-9807-7b81cec37c83@netfence.it>
 <c0764f86-baea-6625-4f3b-d699ccff86b2@safeport.com>
From: Andrea Venturoli <ml@netfence.it>
In-Reply-To: <c0764f86-baea-6625-4f3b-d699ccff86b2@safeport.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.86
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:35612, ipnet:78.134.0.0/17, country:IT]
X-Rspamd-Queue-Id: 4WrXYS4Plvz4rMN

On 8/24/24 01:58, doug@safeport.com wrote:

> These setting can be changed in a running jail. See sysctl.

Thanks, but this does not seem to work.

root@myhost:~ # freebsd-version -ku
13.3-RELEASE-p5
13.3-RELEASE-p5
root@myhost:~ # sysctl security.bsd.see_other_uids=0
security.bsd.see_other_uids: 0 -> 0
root@myhost:~ # ezjail-admin console myjail
root@myjail:~ # sysctl security.bsd.see_other_uids=1
security.bsd.see_other_uids: 0
sysctl: security.bsd.see_other_uids=1: Operation not permitted



Is a newer version of FreeBSD required?
Some jail settings?
Something else?

  bye & Thanks
	av.