conf/102913: /etc/rc.d/named killall in jailed OS

[Laurent LEVIER]

The following reply was made to PR conf/102913; it has been noted by GNATS.

From: Laurent LEVIER <llevier at argosnet.com>
To: Yar Tikhiy <yar at comp.chem.msu.su>
Cc: bug-followup at freebsd.org,freebsd-rc at freebsd.org
Subject: Re: conf/102913: /etc/rc.d/named killall in jailed OS
Date: Thu, 23 Nov 2006 20:42:40 +0100

 At 13:11 23/11/2006, Yar Tikhiy wrote:
 >On Fri, Oct 13, 2006 at 08:59:44AM +0200, Laurent LEVIER wrote:
 > >
 > > I already patched my script.
 > > Now it kills pid, then if it fails, gets all named out of jail (J
 > > flag) and kill these.
 >
 >FWIW, I've just added a new little feature to pkill(1): now it can
 >selectively kill processes out of jail.  Perhaps it can be useful
 >here.  If you need to kill all nameds that are not in jail, just
 >use the following command:
 >
 >         pkill -j none named
 >
 >BTW, for the opposite effect, now the following command should be
 >used:
 >
 >         pkill -j any named
 Great. This way the patch will be included in the next release, 
 solving the issue for all.
 
 Thanks for this great work!
 
 Brgrds
 
 Laurent LEVIER
 Systems & Networks Security Expert, CISSP CISM