ports/163142: Virtualbox doesn't work on nullfs mounted filesystems

[Kamil Choudhury]

>Number:         163142
>Category:       ports
>Synopsis:       Virtualbox  doesn't work on nullfs mounted filesystems
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Dec 09 05:30:09 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Kamil Choudhury
>Release:        FreeBSD 8.1-RELEASE
>Organization:
>Environment:
FreeBSD serenity.anserinae.net 8.1-RELEASE FreeBSD 8.1-RELEASE #0: Mon Jul 19 02:36:49 UTC 2010     root at mason.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  amd64
>Description:
port: emulators/virtualbox-ose

Attempts to launch VBoxHeadless from a nullfs-mounted result in the following error: 

[root at serenity /usr/local/lib/virtualbox]# VBoxHeadless
VBoxHeadless: supR3HardenedExecDir: sysctl failed

Setuid permissions and userids are set correctly for the relevant binaries: 

[root at serenity /usr/local/lib/virtualbox]# ls -al | egrep vboxusers
-rwx--x--x   1 root  vboxusers   178183 Dec  6 19:50 VBoxExtPackHelperApp
-r-s--x--x   1 root  vboxusers    25608 Dec  6 19:50 VBoxHeadless
-rwx--x--x   1 root  vboxusers   798992 Dec  6 19:50 VBoxManage
-r-s--x--x   1 root  vboxusers    25608 Dec  6 19:50 VBoxNetDHCP
-rwx--x--x   1 root  vboxusers  2440992 Dec  6 19:50 VBoxSVC
-rwx--x--x   1 root  vboxusers    27192 Dec  6 19:50 VBoxXPCOMIPCD

Attempting to run them on the raw fs without a nullfs mount works correctly. 

Problem appears to have been identified a while a back: 

http://lists.freebsd.org/pipermail/freebsd-ports/2010-October/064168.html

Use case: attempting to run virtualbox inside a jail using a /usr/local directory mounted via nullfs. 


>How-To-Repeat:
Mount filesystem containing VBox* binaries using nullfs. Attempt to execute VBoxHeadless off nullfs mount. Witness failure. 
>Fix:
Unknown at this time. 

>Release-Note:
>Audit-Trail:
>Unformatted: