Improving FreeBSD-SA-07:01.jail fix

Stefan Bethke stb at lassitu.de
Sat Jan 20 16:52:37 UTC 2007


Am 20.01.2007 um 13:24 schrieb Simon L. Nielsen:

> BTW. with regard to the console.log file I really don't think it
> should be put back inside the jail unless it's possible to make the
> generation of the file entirely inside the jail since it's just not
> worth the risk/complexity.

I'm probably missing something, but why not replace:
	_jail_id=$(head -1 ${_tmp_jail})
	tail +2 ${_tmp_jail} >${_rootdir}/var/log/console.log
with:
	_jail_id=$(head -1 ${_tmp_jail})
	tail +2 ${_tmp_jail} | jexec ${_jail_id} sh -c "cat >/var/log/ 
console.log"


Stefan

-- 
Stefan Bethke <stb at lassitu.de>   Fon +49 170 346 0140




More information about the freebsd-stable mailing list