git.postgresql.org Git - postgresql.git/commitdiff

diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml

index 3c38ff838c7846af82f40aaa44f0e1ec6f03bf57..f3917e780cd318010f829d4c139694649571f791 100644 (file)

--- a/doc/src/sgml/runtime.sgml

+++ b/doc/src/sgml/runtime.sgml

-<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.367 2006年04月11日 19:26:42 momjian Exp $ -->

+<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.368 2006年04月11日 19:42:27 momjian Exp $ -->

<chapter Id="runtime">

<title>Operating System Environment</title>

If running in FreeBSD jails by enabling <application>sysconf</>'s

<literal>security.jail.sysvipc_allowed</>, <application>postmaster</>s

running in different jails should be run by different operating system

- users. This improves security because it prevents one jail from

- interfering with shared memory or semaphores in another, and it

- allows the PostgreSQL IPC cleanup code to function properly.

+ users. This improves security because it prevents non-root users

+ from interfering with shared memory or semaphores in different jail, and it

+ allows the PostgreSQL IPC cleanup code to function properly.

(In FreeBSD 6.0 and later the IPC cleanup code doesn't properly detect

processes in other jails, preventing the running of postmasters on the

same port in different jails.)