After thinking about this some more, it seems to me that it is a waste 
of your time to run Bacula in a jail.  You are going to have nothing but 
problems.  Running regression tests with Bacula is designed to confine 
itself to the regress directory (and perhaps tmp), and the probability 
of having a security problem of any kind while running regression tests 
is essentially zero.   Sorry, but I would not even try running Bacula 
regression tests in a jail.

Best regards,

Kern


On 05/10/2017 01:32 PM, Gary R. Schmidt wrote:
> On 10/05/2017 17:56, Andrea Venturoli wrote:
>> On 05/08/17 19:35, Dan Langille wrote:
>>
>>> I run PostgreSQL in my jails.  Every one of my Bacula regression tests run 
>>> in a separate jail.
>> The problem is that Postgres uses SYSV IPC.
>> In FreeBSD 10.3 you can enable SYSV IPC for jails, but that's a nice way
>> to let them escape into the base host.
>> So jailing will still be a way to "partition" your system for a cleaner
>> management, but it won't help any more WRT to security, so it's not
>> something I'm willing to do.
>>
>> I believe FreeBSD 11 relaxed this limitation, allowing SYSV IPC per
>> jail, but I cannot upgrade right now.
>>
>>
>>
>> So, for now, I'm testing with SQLite: most tests are failing, so I'm
>> sure I've done something wrong.
>> Investigating this will take precedence over switching to PostGres :)
>>
> SQLIte hasn't been supported for years, don't waste your time.
>
> Also, if you are troubled by being in a secure environment, don't try
> and test.  There is an unsubtle difference between "testing in a secure
> environment" and "testing a secure environment."
>
>       Cheers,
>               Gary    B-)
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Bacula-users mailing list
> Bacula-users AT lists.sourceforge DOT net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users