Date: Mon, 26 Mar 2007 09:53:16 +0100 (BST) From: Robert Watson <rwatson@FreeBSD.org> To: Kris Kennaway <kris@obsecurity.org> Cc: kaeru@pd.jaring.my, Mikhail Teterin <mi+kde@aldan.algebra.com>, FreeBSD-Questions@FreeBSD.org Subject: Re: jail vs. nice Message-ID: <20070326094041.S16484@fledge.watson.org> In-Reply-To: <20070326064045.GA10259@xor.obsecurity.org> References: <200703260128.52164@aldan> <20070326064045.GA10259@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 26 Mar 2007, Kris Kennaway wrote:
> On Mon, Mar 26, 2007 at 01:28:51AM -0400, Mikhail Teterin wrote:
>>
>> A program (a TclX' self-test script) works fine in a normal environment,
>> but fails to renice itself, when running in jail (as root):
>>
>> ==== nice-1.8 nice tests FAILED
>> ==== Contents of test case:
>>
>> list [nice -1] [nice]
>>
>> ---- Test generated error; Return code was: 1
>> ---- Return code should have been one of: 0 2
>> ---- errorInfo: failed to increment priority: permission denied
>> while executing
>> "nice -1"
>> invoked from within
>> "list [nice -1] [nice]"
>> ("uplevel" body line 2)
>> invoked from within
>> "uplevel 1 $script"
>>
>> This is new -- just a few months ago the same script was working fine, but
>> it is failing now in both 7.0 and 6.2.
>
> And 5.x. Or it could just be a changed behaviour of the 7.0 kernel, which
> is common to all builds.
This e-mail exchange has left me unclear on what has broken on what versions.
Mikhail, when you say "7.0 and 6.2", do you mean actual 7.0 and 6.2 boxes, or
do you mean the package build environment running on 7.0 on pointyhat as
Kris's followup seems to suggest? And what does "failing now" mean -- a quick
glance at the kernel source in RELENG_5 suggests it started "failing now" a
long time ago?
Robert N M Watson
Computer Laboratory
University of Cambridge
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070326094041.S16484>