Hello hackers... I prepared patches against 4.7-STABLE for secure IPC in jail. Main host and every jail has separated IPC memory zones, etc. I have added some sysctls and set-gid on group kmem for ipcs(1) is nomore needed.
I could port those patches against 5.x if someone will review and commit it maybe. So, any volunteers?:) Patches are attached. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am.
msg40036/pgp00000.pgp
Description: PGP signature