After thinking about this some more, it seems to me that it is a waste of your time to run Bacula in a jail. You are going to have nothing but problems. Running regression tests with Bacula is designed to confine itself to the regress directory (and perhaps tmp), and the probability of having a security problem of any kind while running regression tests is essentially zero. Sorry, but I would not even try running Bacula regression tests in a jail.
Best regards, Kern On 05/10/2017 01:32 PM, Gary R. Schmidt wrote: > On 10/05/2017 17:56, Andrea Venturoli wrote: >> On 05/08/17 19:35, Dan Langille wrote: >> >>> I run PostgreSQL in my jails. Every one of my Bacula regression tests run >>> in a separate jail. >> The problem is that Postgres uses SYSV IPC. >> In FreeBSD 10.3 you can enable SYSV IPC for jails, but that's a nice way >> to let them escape into the base host. >> So jailing will still be a way to "partition" your system for a cleaner >> management, but it won't help any more WRT to security, so it's not >> something I'm willing to do. >> >> I believe FreeBSD 11 relaxed this limitation, allowing SYSV IPC per >> jail, but I cannot upgrade right now. >> >> >> >> So, for now, I'm testing with SQLite: most tests are failing, so I'm >> sure I've done something wrong. >> Investigating this will take precedence over switching to PostGres :) >> > SQLIte hasn't been supported for years, don't waste your time. > > Also, if you are troubled by being in a secure environment, don't try > and test. There is an unsubtle difference between "testing in a secure > environment" and "testing a secure environment." > > Cheers, > Gary B-) > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Bacula-users mailing list > Bacula-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bacula-users > ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
