Date: Tue, 22 Dec 2009 20:51:59 -0600 From: Adam Vande More <amvandemore@gmail.com> To: Glen Barber <glen.j.barber@gmail.com> Cc: freebsd-stable@freebsd.org, Peter Fraser <petros.fraser@gmail.com> Subject: Re: Create socket files Message-ID: <6201873e0912221851u25268e16q6b787874f1d85e23@mail.gmail.com> In-Reply-To: <4ad871310912221815r35542487i8a67ed2f9154a72f@mail.gmail.com> References: <aa2cc130912221734m463107falca51d27e21fccc6a@mail.gmail.com> <4ad871310912221815r35542487i8a67ed2f9154a72f@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Dec 22, 2009 at 8:15 PM, Glen Barber <glen.j.barber@gmail.com>wrote: > Hi Peter > > On Tue, Dec 22, 2009 at 8:34 PM, Peter Fraser <petros.fraser@gmail.com> > wrote: > > Hi All > > I wonder if anyone could help me with this problem. I followed the > > instructions in the handbook to create some jails. It makes part of > > the filesystem readonly which is good. > > This sounds like you used the "service jail" approach [1]. Correct me > if I am wrong. > > > Problem is though that I tried > > installing syslog-ng in one of the jails and when I tried to start it, > > I got this error > > > >> Error binding socket; addr='AF_UNIX(/var/run/log)', error='Permission > >> denied (13)' > >> Error initializing source driver; source='src', id='src#0' > >> Error initializing message pipeline; > >> /usr/local/etc/rc.d/syslog-ng: WARNING: failed to start syslog_ng > > > > I think it's trying to create the socket files /var/run/log and > > /var/run/logpriv but can't. Is there anyway for me to create them > > manually? > > It has been some time since I used that method to create jails; the > areas that have burned me in particular were symlinking > /usr/local/bin/perl to /usr/bin/perl and similarly for the > security/ca_root_nss port. > > Re-reading the doc, /var should be made read/write as it is part of > the jail "skeleton" filesystem, from which you create the "moving > parts" of your jail, so to speak. Did you create /var read-only? > > Regards, > > Forgive my last post, I didn't read your original message in depth. Do you have security.jail.allow_raw_sockets=1 set on host? -- Adam Vande More
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6201873e0912221851u25268e16q6b787874f1d85e23>