From: Stephen Frost <sfrost@snowman.net>
To: Mischa Sandberg <mischa_sandberg@telus.net>
Cc: pgsql-hackers@postgresql.org
Subject: Re: postgresql in FreeBSD jails: proposal
Date: Wed, 16 Jan 2008 12:50:41 -0500
Message-ID: <20080116175041.GQ5031@tamriel.snowman.net> (raw)
In-Reply-To: <1200501702.478e33c61b74e@webmail.telus.net>
References: <1200501702.478e33c61b74e@webmail.telus.net>
* Mischa Sandberg (mischa_sandberg@telus.net) wrote:
> Here (@sophos.com) we run machine cluster tests using FreeBSD jails. A
> jail is halfway between a chroot and a VM. Jails blow a number of
> assumptions about a unix environment: sysv ipc's are global to all
> jails; but a process can only "see" other processes also running in the
> jail. In fact, the quickest way to tell whether you're running in a jail
> is to test for process 1.
I've got a couple of concerns about this-
#1: Having the shared memory be global is a rather large problem when it
comes to something like PG which can have a fair bit of data going
through that area that could be sensitive.
#2: Isn't there already a uid check that's done? Wouldn't this make
more sense anyway (and hopefully minimize the impact of a bad person
getting control of the PG database/user in a given jail)?
#3: At least in the linux-equivilant to jails (linux-vservers, imv
anyway), they started w/o an init process and eventually decided it
made sense to have one, so I'm not sure that this test will always
work and the result might catch someone by suprise at some later
date. Is there a better/more explicit test?
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 188B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sfrost@snowman.net, mischa_sandberg@telus.net, pgsql-hackers@postgresql.org
Subject: Re: postgresql in FreeBSD jails: proposal
In-Reply-To: <20080116175041.GQ5031@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox