Commit ba60acf1 authored by Bruce Momjian's avatar Bruce Momjian

Add documentation about running postmasters in FreeBSD jails (use

separate users).
parent fac2ba5d
<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.366 2006/04/03 23:35:02 tgl Exp $ -->
<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.367 2006/04/11 19:26:42 momjian Exp $ -->
<chapter Id="runtime">
<title>Operating System Environment</title>
......@@ -763,6 +763,18 @@ options "SEMMNS=240"
setting <literal>kern.ipc.shm_use_phys</literal>.
</para>
<para>
If running in FreeBSD jails by enabling <application>sysconf</>'s
<literal>security.jail.sysvipc_allowed</>, <application>postmaster</>s
running in different jails should be run by different operating system
users. This improves security because it prevents one jail from
interfering with shared memory or semaphores in another, and it
allows the PostgreSQL IPC cleanup code to function properly.
(In FreeBSD 6.0 and later the IPC cleanup code doesn't properly detect
processes in other jails, preventing the running of postmasters on the
same port in different jails.)
</para>
<para>
<systemitem class="osname">FreeBSD</> versions before 4.0 work like
<systemitem class="osname">NetBSD</> and <systemitem class="osname">
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment