Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Oct 2001 15:09:33 +0400 (MSD)
From:      Alexey Zakirov <frank@agava.com>
To:        Roman Korolyov <rk@inetcomm.net>
Cc:        <isp@FreeBSD.ORG>
Subject:   Re: jail + quota
Message-ID:  <Pine.BSF.4.32.0110021507200.46640-100000@hellbell.domain>
In-Reply-To: <20011002100821.7C8F417D06@mail.inetcomm.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 2 Oct 2001, Roman Korolyov wrote:

> > The third problem is that all your accounts and groups must be unique
> > across the whole machine.
>
> And what about root in every jail with uid/gid eq 0 ?
> How do you limit them?

In every jail you can create special group for root account and limit
that group instead of uid 0.

> Pity, but I can't see other solution other than using different partitions
> (real or vn) for each jail.

jail probably can't resists against DoS from the root account.

*** WBR, Alexey Zakirov (frank@agava.com)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.32.0110021507200.46640-100000>