Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 24 Aug 2024 17:30:37 +0000 (UTC)
From:      doug@safeport.com
To:        Andrea Venturoli <ml@netfence.it>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: security.bsd.see_other_uids/gids and jails
Message-ID:  <b3c7639-bfb6-9f3a-45e-ccf6732a8417@safeport.com>
In-Reply-To: <fce56c0b-c32f-49bf-a3c9-df765fb15bf9@netfence.it>
References:  <902826c1-fc50-48aa-867d-8010b5814df2@netfence.it> <61ed9412-563-a5f-a3c0-66ff23cb5ac4@safeport.com> <0fe260da-43ff-4c14-9807-7b81cec37c83@netfence.it> <c0764f86-baea-6625-4f3b-d699ccff86b2@safeport.com> <fce56c0b-c32f-49bf-a3c9-df765fb15bf9@netfence.it>

next in thread | previous in thread | raw e-mail | index | archive | help


On Sat, 24 Aug 2024, Andrea Venturoli wrote:

> On 8/24/24 01:58, doug@safeport.com wrote:
>
>> These setting can be changed in a running jail. See sysctl.
>
> Thanks, but this does not seem to work.
>
> root@myhost:~ # freebsd-version -ku
> 13.3-RELEASE-p5
> 13.3-RELEASE-p5
> root@myhost:~ # sysctl security.bsd.see_other_uids=0
> security.bsd.see_other_uids: 0 -> 0
> root@myhost:~ # ezjail-admin console myjail
> root@myjail:~ # sysctl security.bsd.see_other_uids=1
> security.bsd.see_other_uids: 0
> sysctl: security.bsd.see_other_uids=1: Operation not permitted
>
>
>
> Is a newer version of FreeBSD required?
> Some jail settings?
> Something else?
>
If you did this command as root, your system is seriously messed up. I did 
this on a 12.2 system runing as 12.2 jail.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?b3c7639-bfb6-9f3a-45e-ccf6732a8417>