bsdpot / pot

pot: another container framework for FreeBSD, based on jails, ZFS and pf
BSD 3-Clause "New" or "Revised" License
341 stars 31 forks source link

Adding mlock, sysvshm, sysvsem, sysvmsg attributes #263

Closed zilti closed 1 year ago

grembo commented 1 year ago

Also: How does this interact with the logic in _js_start https://github.com/bsdpot/pot/blob/28b302d5daa767093451aa35ae83b05321cbd6cc/share/pot/start.sh#L451-L471

Especially sysvmsg=new sysvsem=new sysvshm=new?

grembo commented 1 year ago

Reading the current start-up code it seems like our current logic always sets allow.sysvipc sysvmsg=new sysvsem=new sysvshm=new.

Given that allow.sysvipc is deprecated anyway, this makes fixing this quite easy:

  1. Remove the sysvip attribute
  2. Add sysvmsg=new, sysvsem=new, sysvshm=new as default attributes
grembo commented 1 year ago

@zilti Thank you for your contribution!