h at schmalzbauer.de
Mon Apr 26 09:41:24 PDT 2004
Am Montag, 26. April 2004 16:03 schrieb Chad Leigh -- Shire.Net LLC:
> On Apr 26, 2004, at 5:42 AM, Harald Schmalzbauer wrote:
> > Use mount_nullfs whenever you need more than the spezialized jail
> > itself was
> > designed for, eg. when installing a new port
> > mount_nullfs /hostusr/ports /jailuser/ports.
> > I explicitly use one single label for each jail. Don't forget in case
> > of a
> > compromised jail the hacker could simply fill up your filesystem when
> > you use
> > only directories.
> > -Harry
> I have stated away from mount_nullfs because the man page for it (on
> 5-2-CURRENT) still says:
> THIS FILE SYSTEM TYPE IS NOT YET FULLY SUPPORTED (READ: IT DOESN'T
> AND USING IT MAY, IN FACT, DESTROY DATA ON YOUR SYSTEM. USE AT
> YOUR OWN
> RISK. BEWARE OF DOG. SLIPPERY WHEN WET.
> This code also needs an owner in order to be less dangerous -
> hackers can apply by sending mail to <hackers at FreeBSD.org> and
> their intent to take it over.
> The mount_nullfs utility first appeared in 4.4BSD.
> Is this still true? Is it safe to use, at least in a read only
Oh, I've never had a look into the man page. And I haven't beed using it for
long nor at high load scenarios but for me it works (tm).
In production I use it readonly but I also haven't had any problems in
read-write operation. But consider it as a nullfs-newbie report!
> I have been remounting various parts of the filesystem in read only
> state using nfs from the local filesystem, ie,
> % mount localhost:/jailmaster/usr /jail/usr
> freebsd-questions at freebsd.org mailing list
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
Please never add my reply address to CC nor to the recipient list!
If you make "answers to all" please remove my address!!!!!!!!!!!!!
I'll complain if I see my reply address on any mailinglist!!!!!!!!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 187 bytes
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040426/d8b140bb/attachment.bin
More information about the freebsd-questions