jail and chflags [patch]

[Robert Watson]

On Sat, 15 May 2004, Pawel Jakub Dawidek wrote:

> +> +> comments? yeahs? neys?
> +> 
> +> Whoa! This looks very serious.
> 
> Ok, false alarm:) After discussion with rwatson@ and cperciva@, it looks
> that changing those flags is permitted due to per-jail securelevels,
> which were intruduced in 5.x. 

However, we might want to think about setting the securelevel in a jail to
at least 1 on creation for compatibility reasons...

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert at fledge.watson.org      Senior Research Scientist, McAfee Research