mlock and jail

From: Bruno Lauzé <brunolauze_at_msn.com>
Date: Wed, 1 Feb 2017 23:52:34 +0000
I would like to ask if there is a reason I would have to applythe  patch below to make an application work in a jail.
And who's bad? the app too intrusive or the bsd not flexible enough (allow.mlock?)


Index: sys/kern/kern_jail.c
===================================================================
--- sys/kern/kern_jail.c        (revision 313033)
+++ sys/kern/kern_jail.c        (working copy)
_at__at_ -3340,6 +3340,11 _at__at_
        case PRIV_PROC_SETLOGINCLASS:
                return (0);


+        case PRIV_VM_MADV_PROTECT:
+        case PRIV_VM_MLOCK:
+        case PRIV_VM_MUNLOCK:
+                return (0);
+
        default:
Received on Wed Feb 01 2017 - 22:53:42 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:10 UTC