Jailed sysvipc implementation.

[Dmitry Sivachenko]

On Tue, Jun 24, 2003 at 06:46:02PM +0200, Pawel Jakub Dawidek wrote:
> Hello.
> 
> Some time ago I've implemented private memory zones for IPC mechism.
> Every jail and main host got its own memory for IPC operations.
> It was implemented for FreeBSD 4.x. Avaliable at:
> 
> 	http://garage.freebsd.pl/privipc.tbz
> 	http://garage.freebsd.pl/privipc.README

I think it would be better to add checks to disallow the use of IPC 
primitives created in one jail from another.
Thus we will avoid allocating separate segments of kernel memory for
each jail.

It could be trivially achieved by adding another field to struct ipc_perm,
but Robert Watson said he knows another way of doing this without
breaking ABI (if I understood him right).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-arch/attachments/20030625/c66c78d3/attachment.bin