From owner-freebsd-arch@FreeBSD.ORG  Wed Jun 25 10:48:52 2003
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: freebsd-arch@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D982E37B401; Wed, 25 Jun 2003 10:48:52 -0700 (PDT)
Received: from milla.ask33.net (milla.ask33.net [217.197.166.60])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id E3AAB44003; Wed, 25 Jun 2003 10:48:50 -0700 (PDT)
	(envelope-from nick@milla.ask33.net)
Received: by milla.ask33.net (Postfix, from userid 1001)
	id 325033ABB51; Wed, 25 Jun 2003 19:52:25 +0200 (CEST)
Date: Wed, 25 Jun 2003 19:52:25 +0200
From: Pawel Jakub Dawidek <nick@garage.freebsd.pl>
To: Robert Watson <rwatson@freebsd.org>
Message-ID: <20030625175225.GS7587@garage.freebsd.pl>
References: <20030624164602.GW7587@garage.freebsd.pl>
	<Pine.NEB.3.96L.1030625132446.57143A-100000@fledge.watson.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="37umynISzNxy+PmB"
Content-Disposition: inline
In-Reply-To: <Pine.NEB.3.96L.1030625132446.57143A-100000@fledge.watson.org>
X-PGP-Key-URL: http://garage.freebsd.pl/jules.asc
X-OS: FreeBSD 4.8-RELEASE i386
X-URL: http://garage.freebsd.pl
User-Agent: Mutt/1.5.1i
cc: freebsd-arch@freebsd.org
Subject: Re: Jailed sysvipc implementation.
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussion related to FreeBSD architecture
	<freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jun 2003 17:48:53 -0000


--37umynISzNxy+PmB
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jun 25, 2003 at 01:26:28PM -0400, Robert Watson wrote:
+> We have some initial patches that wrap the user ipcperm structure in a
+> kernel-specific structure, which we use to add a MAC label.  It would be
+> easy to also add a prison pointer.  We probably won't get to merging this
+> patch for a couple of weeks, but it's worth keeping in mind.=20
+>=20
+>   http://www.watson.org/~robert/freebsd/mac_sysvipc.diff
+>=20
+> This needs style cleanup, bug fixing, testing, etc, but it's the directi=
on
+> we're pushing in for MAC right now.

Hmm, I'm not sure if I understand patch well, but with this stuff we will
be able to run for example two postgresql servers in diffrent jails?
Or it only will provide denying specified requests?

--=20
Pawel Jakub Dawidek                       pawel@dawidek.net
UNIX Systems Programmer/Administrator     http://garage.freebsd.pl
Am I Evil? Yes, I Am!                     http://cerber.sourceforge.net

--37umynISzNxy+PmB
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iQCVAwUBPvnhWT/PhmMH/Mf1AQErngP+PmlvSViY3gSYrq7GjklXJnhjTNuLfo3i
i/S5pEDiYw9BPD2g706HexhYikyvoz81WcGzWO72nYY0VnaSIa/cU9jUrWDxirre
m6+c2W6ba2yaKvKjhnOabRKNbzvPIXlG+VwpRwisgvzO3l0iV3USio1MM6RG2i/d
glTDsUb9TT8=
=CZsf
-----END PGP SIGNATURE-----

--37umynISzNxy+PmB--