000.fbsd at quip.cz
Sat May 9 09:57:48 UTC 2009
Jamie Gritton wrote:
> Here's the first round of hierarchical jails under the new framework.
> Instead of creds having either a prison or a NULL pointer, they all have
> a prison pointer with the default being the global "prison0" that
> contains information about the real environment. Jailed root may (if
> granted permission) create prisons that would be under its place in the
> hierarchy, but may not alter (or even see) prisons at its level or
> The JID space is flat, i.e. every prison in the system has a unique ID.
> The prison name space is hierarchical, with jails having dot-separated
> component names.
I am glad that you are working on this feature!
I added info + links to this patches on wiki http://wiki.freebsd.org/Jails
I hope I will have some free time to test it soon.
More information about the freebsd-jail