On 10/05/2017 17:56, Andrea Venturoli wrote:
> On 05/08/17 19:35, Dan Langille wrote:
> 
>> I run PostgreSQL in my jails.  Every one of my Bacula regression tests run 
>> in a separate jail.
> 
> The problem is that Postgres uses SYSV IPC.
> In FreeBSD 10.3 you can enable SYSV IPC for jails, but that's a nice way
> to let them escape into the base host.
> So jailing will still be a way to "partition" your system for a cleaner
> management, but it won't help any more WRT to security, so it's not
> something I'm willing to do.
> 
> I believe FreeBSD 11 relaxed this limitation, allowing SYSV IPC per
> jail, but I cannot upgrade right now.
> 
> 
> 
> So, for now, I'm testing with SQLite: most tests are failing, so I'm
> sure I've done something wrong.
> Investigating this will take precedence over switching to PostGres :)
> 
SQLIte hasn't been supported for years, don't waste your time.

Also, if you are troubled by being in a secure environment, don't try 
and test.  There is an unsubtle difference between "testing in a secure 
environment" and "testing a secure environment."

        Cheers,
                Gary    B-)

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users