rc.d/jail and jail.conf
Paul Schenkeveld
freebsd at psconsult.nl
Mon Apr 1 02:02:06 UTC 2013
On Sun, Mar 31, 2013 at 09:14:23PM +0200, Dirk Engling wrote:
>
> On Sun, 31 Mar 2013, Jamie Gritton wrote:
>
> > If you don't mind some slightly difficult error messages, you can always
> > "disable" a jail with exec.prestart="false". jail(8) requires all
> > commands to succeed, and in particular won't even create a jail when one
> > of the prestart commands fails.
>
> This violates POLA, but failing with
>
> exec.prestart="echo skipping jail; exit 1"
>
> might work. Even though this is not a good marker from a scripting
> perspective.
Will this prevent all preparations from happening, i.e. will filesystems
be mounted for jails disabled this way?
Although this may work, I think that this looks dirty. I'd really prefer
a "disabled" or "noauto" keyword instead.
-- Paul Schenkeveld
More information about the freebsd-jail
mailing list