[Bug 213390] dns/unbound: Restart fails when upgrading inside a jail

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213390

--- Comment #2 from Garrett Wollman <wollman at FreeBSD.org> ---
I have figured out the cause of the problem.  unbound always attempts to chroot
when starting, but normally succeeds.  When starting inside the environment of
a package upgrade, however, it is erroneously running with a file descriptor
open on a directory.  The check in
`sys/kern/vfs_syscalls.c#chroot_refuse_vdir_fds` then refuses to allow the
chroot to succeed, *if* either `kern.chroot_allow_open_directories` is set to
0, or it is set to 1 (which is the default) and is already running in a chroot
(which includes jails).

Conclusion: this is a bug in pkg; the startup scripts should not be run with
any descriptors open other than the standard 0/1/2.

-- 
You are receiving this mail because:
You are the assignee for the bug.