From owner-freebsd-hackers@FreeBSD.ORG Sun Mar 13 18:18:29 2005 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C821916A4CE for ; Sun, 13 Mar 2005 18:18:29 +0000 (GMT) Received: from smtphost.cis.strath.ac.uk (smtphost.cis.strath.ac.uk [130.159.196.96]) by mx1.FreeBSD.org (Postfix) with ESMTP id 17B3F43D2F for ; Sun, 13 Mar 2005 18:18:29 +0000 (GMT) (envelope-from chodgins@cis.strath.ac.uk) Received: from [192.168.0.4] (chrishodgins.force9.co.uk [84.92.20.141]) j2DII6NU030464; Sun, 13 Mar 2005 18:18:06 GMT Message-ID: <42348525.8080302@cis.strath.ac.uk> Date: Sun, 13 Mar 2005 18:23:33 +0000 From: Chris Hodgins User-Agent: Mozilla Thunderbird 1.0 (X11/20050204) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Samuel J. Greear" References: <1107178792.613.22.camel@spirit> <87d5u33j51.fsf@neva.vlink.ru> <42342C47.209@cis.strath.ac.uk> <200503131051.40700.freebsd-hackers@evilcode.net> In-Reply-To: <200503131051.40700.freebsd-hackers@evilcode.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-CIS-MailScanner-Information: Please contact support@cis.strath.ac.uk for more information X-CIS-MailScanner: Found to be clean X-CIS-MailScanner-SpamCheck: not spam, SpamAssassin (score=-4.9, required 6, autolearn=not spam, BAYES_00 -4.90) X-CIS-MailScanner-From: chodgins@cis.strath.ac.uk cc: Denis Shaposhnikov cc: freebsd-hackers@freebsd.org cc: security@revolutionsp.com cc: Frank Knobbe Subject: Re: Idea about 'skeleton jail X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Mar 2005 18:18:29 -0000 Samuel J. Greear wrote: > Not a bad 'idea' at all, although I won't comment on semantics. I had > something implemented using fs stacking (in a very hackish way, and I > believe it's lost now, so don't ask to see it...) to implement per-jail > quota's that seemed to work quite well. > > Sam > Feel free to comment on the semantics. As I said before, I am not very knowledgable about filesystems and any insight or alternative implementation you can provide would be interesting I'm sure to everyone. Chris > >>This might be a very stupid idea but how about a jailfs. Now I don't >>know all that much about filesystem design so bear with me. How about >>something like this: >> > > > >>SO the jail filesystem is configured at jail-creation time and uses the >>hosts files or jail files depending on the configuration. Might have to >>pass the config file into the jail command. >> >>As I said I am not an expert. Mabye one of the experts could let me >>know what they think? >> >>Chris > > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" >