make world inside a jail

Oliver Lehmann lehmann at
Mon Nov 1 12:28:55 PST 2004


today I played a bit with make world inside a jail, and get stuck with
install -fschg - because setting the schg flag inside a jail is permitted.
I removed at first all schg flags from outside the jail, Then I discovered
the option NOFSCHG in share/mk/ and retried the build with make
-DNOSCHG installworld.
But I got now once more stuck because of -fschg was hardcoded:

--- libexec/rtld-elf/Makefile.orig	Mon Nov  1 20:18:45 2004
+++ libexec/rtld-elf/Makefile	Mon Nov  1 20:19:10 2004
@@ -9,7 +9,11 @@
 LDFLAGS+=	-nostdlib -e .rtld_start
+.if !defined(NOFSCHG)
 INSTALLFLAGS=	-fschg -C -b
 BINDIR=		/libexec
 SYMLINKS=	${BINDIR}/${PROG} /usr/libexec/${PROG}
 MLINKS=		rtld.1 \

and now I'm stuck once more with:
===> bin/rcp
install -s -o root -g wheel -m 4555  -fschg rcp /bin
install: /bin/rcp: Operation not permitted

so I'm asking myself... maybe I'm doing sth. wrong? Is there an other way
to avoid setting the schg flag during installworld?
I actually don't care of security for that jail. I just have sth. to tast
which I would preferably test within a jail and which requieres make
I could submit an pr with a patch which adds a NOSCHG option arround every
-fschg assignment to INSTALLFLAGS if you want me to. But right now I'm
just asking if there is something _I_ did wrong ;)

 Oliver Lehmann

More information about the freebsd-current mailing list