diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml index a94d7a48ba5..9cee668edf3 100644 --- a/doc/src/sgml/runtime.sgml +++ b/doc/src/sgml/runtime.sgml @@ -1,5 +1,5 @@ @@ -766,6 +766,18 @@ options "SEMMNS=240" setting kern.ipc.shm_use_phys. + + If running in FreeBSD jails by enabling sysconf's + security.jail.sysvipc_allowed, postmasters + running in different jails should be run by different operating system + users. This improves security because it prevents one jail from + interfering with shared memory or semaphores in another, and it + allows the PostgreSQL IPC cleanup code to function properly. + (In FreeBSD 6.0 and later the IPC cleanup code doesn't properly detect + processes in other jails, preventing the running of postmasters on the + same port in different jails.) + + FreeBSD versions before 4.0 work like NetBSD and