Re: stable/12: jail(2) failures after ca9ab8ea1774

From: Fabian Keil <freebsd-listen_at_fabiankeil.de>
Date: Mon, 15 Nov 2021 08:06:11 UTC
Johannes Totz via freebsd-stable <freebsd-stable@freebsd.org> wrote on 2021-11-11:

> On 10/11/2021 06:46, Fabian Keil wrote:

> > ElectroBSD's ggate[cd]-related patches are available at:
> > <https://www.fabiankeil.de/sourcecode/electrobsd/ElectroBSD-12-0b7b773f3ef4-2021.11.10-ggate.diff>
> > They should apply cleanly on stable/12 e644c87aa.
> 
> Lots of great stuff in that patch file! Thanks for sharing!

You're welcome.

As it turned out, jail(2) works as advertised when
the forked process closes the pidfile which it
doesn't need.

I've updated the patch set:
<https://www.fabiankeil.de/sourcecode/electrobsd/ElectroBSD-12-238329b6347-2021.11.15-ggate.diff>

> Which ones of those should we back-port to fbsd?

Not my call.

The security fixes should be uncontroversial so
I'd recommend looking at them first.

> I've got patches open on ggate too, see
> https://reviews.freebsd.org/D31722
> https://reviews.freebsd.org/D31727
> https://reviews.freebsd.org/D31709

Interesting. Thanks for the links.

Fabian