Re: check for jailed environment for adjkerntz

From: Pawel Jakub Dawidek <pjd_at_FreeBSD.org>
Date: Mon, 1 Mar 2010 21:55:20 +0100
On Mon, Mar 01, 2010 at 02:15:41AM +0300, Subbsd wrote:
> jail with "complete" type have standard crontab a file of tasks. However not
> all standard task are adapted for work in jail an environment. For example
> adjkerntz which generates
> 
> adjkerntz [46733]: sysctl (set: "machdep.wall_cmos_clock"): Operation not
> permitted
> 
> I suggest to give adjkerntz concept about jail in which to it it is not
> necessary to work:
[...]

I also always was finding that annoying, but only your e-mail made me to
think about ways to fix it and that maybe simple patch like the one
below will do?

--- etc/crontab	(wersja 204363)
+++ etc/crontab	(kopia robocza)
_at__at_ -22,4 +22,4 _at__at_
 #
 # Adjust the time zone if the CMOS clock keeps local time, as opposed to
 # UTC time.  See adjkerntz(8) for details.
-1,31	0-5	*	*	*	root	adjkerntz -a
+1,31	0-5	*	*	*	root	[ `sysctl -n security.jail.jailed` -eq 0 ] && adjkerntz -a

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd_at_FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

Received on Mon Mar 01 2010 - 19:55:31 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:01 UTC