On 05/08/17 19:35, Dan Langille wrote:

> I run PostgreSQL in my jails.  Every one of my Bacula regression tests run in 
> a separate jail.

The problem is that Postgres uses SYSV IPC.
In FreeBSD 10.3 you can enable SYSV IPC for jails, but that's a nice way 
to let them escape into the base host.
So jailing will still be a way to "partition" your system for a cleaner 
management, but it won't help any more WRT to security, so it's not 
something I'm willing to do.

I believe FreeBSD 11 relaxed this limitation, allowing SYSV IPC per 
jail, but I cannot upgrade right now.



So, for now, I'm testing with SQLite: most tests are failing, so I'm 
sure I've done something wrong.
Investigating this will take precedence over switching to PostGres :)


  bye
        av.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users