best practice for locking down private jail?

[Aleksandr Miroslav]

On Wed, Dec 2, 2015 at 9:44 PM, Aleksandr Miroslav
<alexmiroslav at gmail.com> wrote:
> - from the example.org machine, outside the jail, i setup httpd to
> serve files only from
> /usr/jails/privatejail/usr/home/joeblow/audiofiles
[...]
> can I tell Apache to only serve up mp3 files of name
> lecture-num.mp3 or something like that?

Thinking about this some more. I think instead of having apache point
to the jail directly, I setup a cron job on the host that calls a
script that runs every 5 minutes or so, and copies only mp3 files of
some pattern-matched name to the host system, and then only that is
served up by apache. That would work better I think. It would have to
be a cron job on the host, I don't think I can have a script from
inside the private jail call something directly on the host.