Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 6 Oct 2000 02:08:21 -0700
From:      Kris Kennaway <kris@citusc.usc.edu>
To:        Bart_van_Leeuwen@doosys.com
Cc:        "Jacques A. Vidrine" <n@nectar.com>, freebsd-security@FreeBSD.ORG
Subject:   Re: Fwd: eth-security : ANNOUNCE : Resources no for ALL
Message-ID:  <20001006020820.A91130@citusc17.usc.edu>
In-Reply-To: <OFB0C2480F.3416AB2D-ONC125696F.00437311@intra.doosys.com>; from Bart_van_Leeuwen@doosys.com on Thu, Oct 05, 2000 at 02:25:11PM %2B0200
References:  <OFB0C2480F.3416AB2D-ONC125696F.00437311@intra.doosys.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 05, 2000 at 02:25:11PM +0200, Bart_van_Leeuwen@doosys.com wrote:
 
> Creating a single jail for a group of interactive users is quite practical.
> Creating a seperate jail for each individual interactive user can become
> inpractical for example due to disk space requirements and the
> complexibility of the evironment for the administrator.

Read-only nullfs mounts might be good enough for a relatively few
number of users (they're working in -current nowadays). It would be
interesting to try and do this in practice and see if it's usable, and
if not, why not.

Kris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001006020820.A91130>