mirrors/postgres
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update jail wording to mention non-root users.

Browse Source
This commit is contained in:
Bruce Momjian 2006-04-11 19:42:27 +00:00
parent ba60acf17e
commit cc7b6c75e3
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/src/sgml/runtime.sgml
View File

@ -1,4 +1,4 @@
<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.367 2006/04/11 19:26:42 momjian Exp $ --> <!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.368 2006/04/11 19:42:27 momjian Exp $ -->
<chapter Id="runtime"> <chapter Id="runtime">
<title>Operating System Environment</title> <title>Operating System Environment</title>
@ -767,8 +767,8 @@ options "SEMMNS=240"
If running in FreeBSD jails by enabling <application>sysconf</>'s If running in FreeBSD jails by enabling <application>sysconf</>'s
<literal>security.jail.sysvipc_allowed</>, <application>postmaster</>s <literal>security.jail.sysvipc_allowed</>, <application>postmaster</>s
running in different jails should be run by different operating system running in different jails should be run by different operating system
users. This improves security because it prevents one jail from users. This improves security because it prevents non-root users
interfering with shared memory or semaphores in another, and it from interfering with shared memory or semaphores in different jail, and it
allows the PostgreSQL IPC cleanup code to function properly. allows the PostgreSQL IPC cleanup code to function properly.
(In FreeBSD 6.0 and later the IPC cleanup code doesn't properly detect (In FreeBSD 6.0 and later the IPC cleanup code doesn't properly detect
processes in other jails, preventing the running of postmasters on the processes in other jails, preventing the running of postmasters on the