diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml index 20e63bea75dbab7cf499699cc925633b87557f7f..3c38ff838c7846af82f40aaa44f0e1ec6f03bf57 100644 --- a/doc/src/sgml/runtime.sgml +++ b/doc/src/sgml/runtime.sgml @@ -1,4 +1,4 @@ -<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.366 2006/04/03 23:35:02 tgl Exp $ --> +<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.367 2006/04/11 19:26:42 momjian Exp $ --> <chapter Id="runtime"> <title>Operating System Environment</title> @@ -763,6 +763,18 @@ options "SEMMNS=240" setting <literal>kern.ipc.shm_use_phys</literal>. </para> + <para> + If running in FreeBSD jails by enabling <application>sysconf</>'s + <literal>security.jail.sysvipc_allowed</>, <application>postmaster</>s + running in different jails should be run by different operating system + users. This improves security because it prevents one jail from + interfering with shared memory or semaphores in another, and it + allows the PostgreSQL IPC cleanup code to function properly. + (In FreeBSD 6.0 and later the IPC cleanup code doesn't properly detect + processes in other jails, preventing the running of postmasters on the + same port in different jails.) + </para> + <para> <systemitem class="osname">FreeBSD</> versions before 4.0 work like <systemitem class="osname">NetBSD</> and <systemitem class="osname">