mlock within jail possible for use with proftpd and TLS

Niklas Blomdalen me at najk.com
Sun Feb 21 19:28:37 UTC 2010


Is it possible to make applications use mlock within jails? Im trying  
to use proftp with tls inside an jail.
If i start it as root with proftpd -d 2, it complains about locking  
passphrase into memory: operation not permitted.
error locking passphrase into memory: Operation not permitted

Im using versions
FreeBSD 8.0-RELEASE-p2
ProFTPD Version 1.3.2c
  - mod_tls/2.2.2

here are sysctls settings for jail related settings.
security.jail.param.cpuset.id: 0
security.jail.param.host.hostid: 0
security.jail.param.host.hostuuid: 64
security.jail.param.host.domainname: 256
security.jail.param.host.hostname: 256
security.jail.param.children.max: 0
security.jail.param.children.cur: 0
security.jail.param.enforce_statfs: 0
security.jail.param.securelevel: 0
security.jail.param.path: 1024
security.jail.param.name: 256
security.jail.param.parent: 0
security.jail.param.jid: 0
security.jail.enforce_statfs: 2
security.jail.mount_allowed: 0
security.jail.chflags_allowed: 1
security.jail.allow_raw_sockets: 1
security.jail.sysvipc_allowed: 0
security.jail.socket_unixiproute_only: 1
security.jail.set_hostname_allowed: 1
security.jail.jail_max_af_ips: 255
security.jail.jailed: 1

Anyone got any tip?

Niklas


More information about the freebsd-questions mailing list