On 05/08/17 19:35, Dan Langille wrote:
> I run PostgreSQL in my jails. Every one of my Bacula regression tests run in
> a separate jail.
The problem is that Postgres uses SYSV IPC.
In FreeBSD 10.3 you can enable SYSV IPC for jails, but that's a nice way
to let them escape into the base host.
So jailing will still be a way to "partition" your system for a cleaner
management, but it won't help any more WRT to security, so it's not
something I'm willing to do.
I believe FreeBSD 11 relaxed this limitation, allowing SYSV IPC per
jail, but I cannot upgrade right now.
So, for now, I'm testing with SQLite: most tests are failing, so I'm
sure I've done something wrong.
Investigating this will take precedence over switching to PostGres :)
bye
av.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
