Call for a hacker.... security.bsd.see_other_uids in jails only
    Bjoern A. Zeeb 
    bzeeb-lists at lists.zabbadoz.net
       
    Fri May 21 06:30:29 PDT 2004
    
    
  
On Fri, 21 May 2004, Ruslan Ermilov wrote:
> > A more general solution will be better, but harder to implement: make
> > some sysctl branches (e.g. security.bsd) local per jail, and possibility to
> > change them only from host machine.
> >
> I like the idea of per-jail sysctl MIB trees, e.g.:
>
> jail.<JID>.security.bsd
jail ID is not too good; we would need s.th. that could be treated
'perstistent' between reboots.
Perhaps not use sysctl at all ...
-- 
Bjoern A. Zeeb				bzeeb at Zabbadoz dot NeT
there is no 'do you really want to quit ?'-button in RL.
    
    
More information about the freebsd-current
mailing list