Setting the jail identifier from /etc/rc.conf

Ed Schouten ed at 80386.nl
Thu Oct 22 12:08:18 UTC 2009


Hi Dag-Erling,

* Dag-Erling Smørgrav <des at des.no> wrote:
> on the command line).  There is no rc.conf variable for it, but you can
> add "-n foo" to jail_foo_flags.

Well, good enough I guess.

I solved the entire getty thing by doing the following. I'm running a
jail called small.80386.nl, which is a temporary install I had, to see
what happens if you enable a lot of WITHOUT_* flags.

/etc/devfs.rules:
| [small_80386_nl=5]
| add include $devfsrules_hide_all
| add include $devfsrules_unhide_basic
| add include $devfsrules_unhide_login
| add path ttyv8 unhide

/etc/rc.conf:
| jail_small_flags="-l -U root -n small_80386_nl"
| jail_small_devfs_ruleset="small_80386_nl"

/etc/ttys:
| ttyv8 "/usr/sbin/jexec small_80386_nl /usr/libexec/getty Pc" cons25 on secure

-- 
 Ed Schouten <ed at 80386.nl>
 WWW: http://80386.nl/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-arch/attachments/20091022/5921abf3/attachment.pgp


More information about the freebsd-arch mailing list