[Bug 191279] [jail] jail allow.sysvipc - doesn't work until jail is started TWICE after reboot

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=191279

--- Comment #8 from dreamcat4 at gmail.com ---
Found it. The problem occurs in qjail program (not rc.d script). When saving
the definition records (the qjail config file_.

I think when enable with 'config -y', it save 'allow.sysvipc' correctly into
'qjail.local/$jailname'. But not get saved into 'qjail.global/$jailname'. So
hence the rc.d start not work, whereas the command line does work.

Not just sysvipc line. But devfs_ruleset line is also missing:

ruleset=""
sysvipc=""

Do not appear in the qjail.global copy of the definition record. It is likely
that the variable is set correct inside qjail program, but those extra line
were not inserted of both templates (only local), so is missed when writing the
'qjail.global' to disk.

See here:

freenas // root^> cat /usr/local/etc/qjail.global/webcamd 
name="webcamd"
ip4="192.168.1.214,lo0|127.0.0.214"
ip6=""
path="/usr/jails/webcamd"
interface="re0"
fstab="/usr/local/etc/qjail.fstab/webcamd"
securelevel=""
cpuset=""
fib=""
vnet=""
vinterface=""
rsockets="allow.raw_sockets"
quotas=""
nullfs=""
zfs=""
poststartssh=""
deffile="/usr/local/etc/qjail.local/webcamd"
image=""
imagetype=""
imageblockcount=""
imagedevice=""

freenas // root^> cat /usr/local/etc/qjail.local/webcamd 
name="webcamd"
ip4="192.168.1.214,lo0|127.0.0.214"
ip6=""
path="/usr/jails/webcamd"
interface="re0"
fstab="/usr/local/etc/qjail.fstab/webcamd"
securelevel=""
cpuset=""
fib=""
vnet=""
vinterface=""
rsockets="allow.raw_sockets"
ruleset=""
sysvipc="allow.sysvipc"
quotas=""
nullfs=""
zfs=""
poststartssh=""
deffile="/usr/local/etc/qjail.local/webcamd"
image=""
imagetype=""
imageblockcount=""
imagedevice=""
freenas // root^>

-- 
You are receiving this mail because:
You are the assignee for the bug.