On 10/05/2017 17:56, Andrea Venturoli wrote:
> On 05/08/17 19:35, Dan Langille wrote:
>
>> I run PostgreSQL in my jails. Every one of my Bacula regression tests run
>> in a separate jail.
>
> The problem is that Postgres uses SYSV IPC.
> In FreeBSD 10.3 you can enable SYSV IPC for jails, but that's a nice way
> to let them escape into the base host.
> So jailing will still be a way to "partition" your system for a cleaner
> management, but it won't help any more WRT to security, so it's not
> something I'm willing to do.
>
> I believe FreeBSD 11 relaxed this limitation, allowing SYSV IPC per
> jail, but I cannot upgrade right now.
>
>
>
> So, for now, I'm testing with SQLite: most tests are failing, so I'm
> sure I've done something wrong.
> Investigating this will take precedence over switching to PostGres :)
>
SQLIte hasn't been supported for years, don't waste your time.
Also, if you are troubled by being in a secure environment, don't try
and test. There is an unsubtle difference between "testing in a secure
environment" and "testing a secure environment."
Cheers,
Gary B-)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
