Call for a hacker.... security.bsd.see_other_uids in jails only

Bjoern A. Zeeb bzeeb-lists at lists.zabbadoz.net
Fri May 21 06:30:29 PDT 2004


On Fri, 21 May 2004, Ruslan Ermilov wrote:

> > A more general solution will be better, but harder to implement: make
> > some sysctl branches (e.g. security.bsd) local per jail, and possibility to
> > change them only from host machine.
> >
> I like the idea of per-jail sysctl MIB trees, e.g.:
>
> jail.<JID>.security.bsd

jail ID is not too good; we would need s.th. that could be treated
'perstistent' between reboots.

Perhaps not use sysctl at all ...

-- 
Bjoern A. Zeeb				bzeeb at Zabbadoz dot NeT

there is no 'do you really want to quit ?'-button in RL.


More information about the freebsd-current mailing list