From owner-freebsd-stable@FreeBSD.ORG  Sun Sep 21 22:29:06 2008
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 70C7E1065672
	for <freebsd-stable@freebsd.org>; Sun, 21 Sep 2008 22:29:06 +0000 (UTC)
	(envelope-from jcw@highperformance.net)
Received: from mx1.highperformance.net (dsl081-163-120.sea1.dsl.speakeasy.net
	[64.81.163.120])
	by mx1.freebsd.org (Postfix) with ESMTP id 382558FC16
	for <freebsd-stable@freebsd.org>; Sun, 21 Sep 2008 22:29:06 +0000 (UTC)
	(envelope-from jcw@highperformance.net)
Received: from w16.stradamotorsports.com (w16.stradamotorsports.com
	[192.168.1.16])
	by mx1.highperformance.net (8.13.8/8.13.8) with ESMTP id m8LMT3BB042020;
	Sun, 21 Sep 2008 15:29:03 -0700 (PDT)
	(envelope-from jcw@highperformance.net)
Message-ID: <48D6CAAE.9060303@highperformance.net>
Date: Sun, 21 Sep 2008 15:29:02 -0700
From: "Jason C. Wells" <jcw@highperformance.net>
User-Agent: Thunderbird 2.0.0.4pre (X11/20080205)
MIME-Version: 1.0
To: "Jason C. Wells" <jcw@highperformance.net>
References: <48D68FD6.50804@highperformance.net>	<20080921215113.GB9494@icarus.home.lan>
	<48D6C995.7060606@highperformance.net>
In-Reply-To: <48D6C995.7060606@highperformance.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-4.4 required=2.5 tests=ALL_TRUSTED,BAYES_00 
	autolearn=failed version=3.1.6
X-Spam-Checker-Version: SpamAssassin 3.1.6 (2006-10-03) on 
	s4.stradamotorsports.com
Cc: Jeremy Chadwick <koitsu@freebsd.org>,
	freebsd-stable <freebsd-stable@freebsd.org>
Subject: Re: Installworld deletes libc
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 21 Sep 2008 22:29:06 -0000

Jason C. Wells wrote:
> Jeremy Chadwick wrote:
>> On Sun, Sep 21, 2008 at 11:17:58AM -0700, Jason C. Wells wrote:
>>> I have the problem similar to one described in 20071024 UPDATING.  
>>> The  build is running inside a jail. The system is 6.2-RELEASE. I 
>>> supped this  moring.  I have the correct lib/Makefile.  During 
>>> installworld I receive  an error:
>>>
>>> install: /lib/libc.so.6: chflags: Operation not permitted
>>> *** Error code 71
>>>
>>> Stop in /usr/src/lib/libc.
>>>
>>> My situation is different in the libc is erased in the process.  
>>> Copying  the new libc.so.6 from /usr/obj does not fix the problem.
>>>
>>> Any ideas?
>>
>> Sounds like kern.securelevel is in the way.  See security(7).
> 
> The securelevel would normally prevent the deletion of a file.  The 
> secure level of this jail is -1 in any case so the schg flag should be 
> ignored. security.jail.chflags_allowed=0 seems to supersede the 
> securelevel according to sysctl(8).
> 
> Some part of installworld is misbehaving in the jail. The security 
> mechanisms in securelevel and security.jail.chflags_allowed are not 
> working.

I should add that 'systcl security.jail.chflags_allowed=1' allowed 
installworld to proceed without error. That solves my immediate problem. 
  There appears to be a bug in the security mechanism.

Later,
Jason