Coment:: sysctl security.jail.list_allowed

Pawel Jakub Dawidek pjd at FreeBSD.org
Mon Mar 15 05:07:01 PST 2004


On Mon, Mar 15, 2004 at 01:30:43PM +0100, Sebastian Yepes F. [ESN] wrote:
+> By my part a think that the commit
+> 
+> http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/kern/kern_jail.c.diff?r1=1.41&r2=1.40
+> 
+> sude be backtout.. i like the ability to Enable & Disable this Listing
+> 
+> 
+> What du the rest of you guys think??

It was a bug. This sysctl allows to see other jails from inside a jail.
This is wrong and bugus from jail's design point of view.
Note, that you're still able to list jails from outside a jail - maybe
you're missing this.

-- 
Pawel Jakub Dawidek                       http://www.FreeBSD.org
pjd at FreeBSD.org                           http://garage.freebsd.pl
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20040315/4fb15d00/attachment.bin


More information about the freebsd-current mailing list