Security of syslog socket in vnet jail?

remodeler remodeler at alentogroup.org
Fri Oct 30 04:13:11 UTC 2009


I wonder if anyone has an opinion on the security implications of opening
syslog sockets in a vnet jail, vs. using a remote logging host. The jail does
not otherwise allow unix sockets. The /var/run/log and /var/run/logpriv
sockets would be provided by the host syslogd, using -l option. The
alternative would have syslogd running in its own vnet jail as a logging host.

Thank you.


More information about the freebsd-jail mailing list