This question is prompted by this one.
I've set up a jail to run PostgreSQL but without allow.sysvipc
when creating the jail (or setting the relevant rc.conf entries), the system call to shmget
are blocked and PostgreSQL won't run. The problem is that by setting allow.sysvipc
the whole point of having a jail is eliminated.
Are there alternatives?