Hi guys,
Im reading about sysvipc(depreceated) method in FreeBSD and wondering if all of them are necessary. I found some news on blog where were mentioned that shared memory isn't so secure and it's better to use only semaphores. But if we know that postgresql need access to sysvshm or not ?. Someone can explain to me a little bit more about those options ?
Also read that "new" options allow create own namespace in jail instead inherit from host.
Allowing sysvipc "... defeat the whole purpose of having a jail; privileged users from the jail would be able to affect processes outside the jailed environment."
Do you always guys use those 3 options: sysvmsg, sysvsem, sysvshm if yes, what really do you need them for ?
How to check which programs need those options ?
Thanks
Ehh. I don't why part of my post is crossed out ???
Im reading about sysvipc(depreceated) method in FreeBSD and wondering if all of them are necessary. I found some news on blog where were mentioned that shared memory isn't so secure and it's better to use only semaphores. But if we know that postgresql need access to sysvshm or not ?. Someone can explain to me a little bit more about those options ?
Also read that "new" options allow create own namespace in jail instead inherit from host.
Allowing sysvipc "... defeat
Do you always guys use those 3 options: sysvmsg, sysvsem, sysvshm if yes, what really do you need them for ?
How to check which programs need those options ?
Thanks
Ehh. I don't why part of my post is crossed out ???