From owner-freebsd-questions@FreeBSD.ORG  Tue Jun  6 16:31:23 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9409D16A93B
	for <freebsd-questions@freebsd.org>;
	Tue,  6 Jun 2006 16:31:23 +0000 (UTC)
	(envelope-from kevin.wortman@gmail.com)
Received: from nz-out-0102.google.com (nz-out-0102.google.com [64.233.162.204])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 15FA943D45
	for <freebsd-questions@freebsd.org.>;
	Tue,  6 Jun 2006 16:31:20 +0000 (GMT)
	(envelope-from kevin.wortman@gmail.com)
Received: by nz-out-0102.google.com with SMTP id z6so1464199nzd
	for <freebsd-questions@freebsd.org.>;
	Tue, 06 Jun 2006 09:31:20 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:mime-version:content-type;
	b=IUa5JYkWddvd77+3cyXLO5BEHacnXUk8YLwEpzK8O4qKAuLpJBFgB1V5LhcA8F/2GkT6aaxjI1rYEXgP5k4kwfLdqn6z9jfJqyTCLOu9OBWMaeP3Uz1c8gIuPLmvrRTs2ajWJQEgeQHFbiwy3HT3R3NNcSU4b6M/FlkbQPj0yO8=
Received: by 10.36.9.1 with SMTP id 1mr1037578nzi;
	Tue, 06 Jun 2006 09:31:19 -0700 (PDT)
Received: by 10.36.104.16 with HTTP; Tue, 6 Jun 2006 09:31:19 -0700 (PDT)
Message-ID: <6bcb65c40606060931s6b35ce3fo238625d6120ecd01@mail.gmail.com>
Date: Tue, 6 Jun 2006 12:31:19 -0400
From: "Kevin Wortman" <kevin.wortman@gmail.com>
To: freebsd-questions@freebsd.org.
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: 
Subject: PTY's in a FreeBSD Jail
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Jun 2006 16:31:23 -0000

All,

Sometime ago there was a question posed about the error "Server refused to
allocate pty" when trying to ssh into a freebsd jail.  It seemed to be
answered by someone saying that the command "mount_devfs devfs
/your/jail/dir/dev" needed to enter, which in fact does make the jail start
working.  However, it was stated in the same posting that this was not
considered to be secure.

Hence my question, if this is in fact not secure, how can I get my jail
properly configured in FreeBSD 6.0 without compromising the security of the
box?  I ask because I have several boxes currently running in my environment
with jails (FreeBSD 4.x) and do not see this command anywhere in the startup
scripts yet the jailed environment appears to be working like a champ.

I am fairly new to the FreeBSD world so please pardon my ignorance, if I
have displayed any.

Thanks in advance for any help/advise

V/r

Kevin Wortman