Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Glenn Faden
Steffen Weiberle wrote: Is it safe to generalize that non-LOFS file systems in Solaris 10 do not allow cross-zone interaction? procfs does not. namefs does not. tmpfs does not. sockfs does not. doors does not. What about all the others (I can't even name them all)? Doors can be used in Solar

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Dan Price
On Tue 12 Dec 2006 at 03:58PM, Dan Price wrote: > Steffen, > > Probably you should review the duckhorn documentation (All of which has > been forwarded to zones-discuss, and which are also available here: > http://www.opensolaris.org/os/community/zones/zones_design_docs) and our > Dec 4 KTD, the s

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Dan Price
On Tue 12 Dec 2006 at 06:30PM, Steffen Weiberle wrote: > Jerry Jelinek wrote On 12/12/06 16:54,: > >Steffen Weiberle wrote: > > > >>Is it safe to generalize that non-LOFS file systems in Solaris 10 do > >>not allow cross-zone interaction? procfs does not. namefs does not. > >>tmpfs does not. sock

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Jerry Jelinek
Steffen Weiberle wrote: This new rctl is part of the overall zones/rm improvement project we have been working on for a while now. Thanks, Jerry! I am waiting with open arms :) for this, and memory sets, and swap sets, and IP instances! Oh, and CPU caps. Wait, does this replace swap sets? Or

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Steffen Weiberle
Jerry Jelinek wrote On 12/12/06 16:54,: Steffen Weiberle wrote: Is it safe to generalize that non-LOFS file systems in Solaris 10 do not allow cross-zone interaction? procfs does not. namefs does not. tmpfs does not. sockfs does not. doors does not. What about all the others (I can't even nam

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Jerry Jelinek
Steffen Weiberle wrote: Is it safe to generalize that non-LOFS file systems in Solaris 10 do not allow cross-zone interaction? procfs does not. namefs does not. tmpfs does not. sockfs does not. doors does not. What about all the others (I can't even name them all)? Steffen, One issue to be a

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Edward Pilatowicz
i believe that this is the bug you're looking for: 6436336 5.10:named pipe in chroot cage blocks as cannot create http://bugs.opensolaris.org/view_bug.do?bug_id=6436336 ed On Tue, Dec 12, 2006 at 10:47:04AM -0800, Glenn Faden wrote: > Names pipes may be used between zones when Tru

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Steffen Weiberle
Hi Dan, Dan Price wrote On 12/12/06 13:59,: On Tue 12 Dec 2006 at 10:47AM, Glenn Faden wrote: Names pipes may be used between zones when Trusted Extensions is enabled. The policy for data flow between zones is generally more restrictive when TX is enabled, but in this case it is slightly more

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Glenn Faden
Dan Price wrote: On Tue 12 Dec 2006 at 10:47AM, Glenn Faden wrote: Names pipes may be used between zones when Trusted Extensions is enabled. The policy for data flow between zones is generally more restrictive when TX is enabled, but in this case it is slightly more open. The specific policy

Re: [zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Dan Price
On Tue 12 Dec 2006 at 10:47AM, Glenn Faden wrote: > Names pipes may be used between zones when Trusted Extensions is > enabled. The policy for data flow between zones is generally more > restrictive when TX is enabled, but in this case it is slightly more > open. The specific policy difference is i

[zones-discuss] Re: RE: ?: named pipes between zones using shared filesystem

2006-12-12 Thread Glenn Faden
Names pipes may be used between zones when Trusted Extensions is enabled. The policy for data flow between zones is generally more restrictive when TX is enabled, but in this case it is slightly more open. The specific policy difference is implemented in the function tsol_fifo_access(). http://