automatic garbage collection of stuff mounted (etc.) by jailed root

Miroslav Lachman 000.fbsd at quip.cz
Mon Apr 22 19:37:35 UTC 2013


Jamie Gritton wrote:
> On 04/22/13 11:39, Miroslav Lachman wrote:
>> Jamie Gritton wrote:
>>> On 04/22/13 03:17, Mateusz Guzik wrote:
>>
>> [...]
>>
>>>> Again, the goal is to have jails clean up automatically after anything
>>>> jailed root was permitted to do.
>>>>
>>>> Thoughts?
>>>
>>> This already happens when jails are created using a jail.conf file. Any
>>> mounts there are unmounted as part of the jail removal process. Just
>>> recently I fixed it to properly do this unmounting in reverse order.
>>
>> Do you mean mounts defined in jail.conf or all mounts manually done by
>> root user in jail?
>>
>> Miroslav Lachman
>
> Ah, I see the difference. Yes, that's only for mounts in the jail.conf.
> For mounts done by the jail itself, I guess we would go off the mount
> record's credential. So is this something you expect to be happening
> entirely in the kernel?

I don't know what's the right place for this, but I am sure there should 
be something to clear these mounts made inside jails. Otherwise there 
will be unwanted leftovers after a jail restart / destroy.

Miroslav Lachman


More information about the freebsd-jail mailing list