Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 5 May 2003 13:25:27 +0200
From:      Ruben de Groot <fbsd-q@bzerk.org>
To:        freebsd-questions@freebsd.org
Subject:   (un)hiding devices with devfs(8)
Message-ID:  <20030505112527.GA17037@ei.bzerk.org>

next in thread | raw e-mail | index | archive | help

Hi,

While playing with devfs in a 5.0 jailed environment I noticed I could
read the disk devices (dd if=/dev/ad0s1c ...)
To hide any unneeded devices in the jail I created the following ruleset:

caliban# devfs rule -s 1 show
100 hide
200 path pty* unhide
300 path null unhide
400 path zero unhide
500 path random unhide
600 path urandom unhide
700 path stdin unhide
800 path stdout unhide
900 path stderr unhide

Unfortunately, the last 3 are only symlinks to /dev/fd/0, /dev/fd/1
and /dev/fd/2. So now I must unhide these /dev/fd/* devices. I tried

1000 path fd* unhide

and some other things, but that didn't work.
Any clues?

Ruben



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030505112527.GA17037>