Skip site navigation (1)Skip section navigation (2)
Date:      13 Nov 2002 14:06:50 +1030
From:      "Daniel O'Connor" <doconnor@gsoft.com.au>
To:        Hans Zaunere <zaunere@yahoo.com>
Cc:        freebsd-hackers@FreeBSD.ORG
Subject:   Re: Shared files within a jail
Message-ID:  <1037158610.66058.28.camel@chowder.localdomain>
In-Reply-To: <20021113030847.69266.qmail@web12801.mail.yahoo.com>
References:  <20021113030847.69266.qmail@web12801.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 2002-11-13 at 13:38, Hans Zaunere wrote:
> -- Symlinks won't work because of the chroot.
> -- Mounts from within the jail aren't allowed, plus a single partition
> can't be mounted multiple times, AFAIK.
> -- I don't have NFS setup, and I would like to avoid it as much as
> possible.
> -- mount_null seems to be the answer, however the warning at the end of
> the man page is scary.
> 
> Is there any combination of these (or anything I'm forgetting) that
> could help me here?  Is mount_null stable?
> 
> I've had an account on a jail server which had /shared visible within
> the jail, and symlinks to /bin, /usr/lib and such.  I'm not sure how
> this was actually implemented, and I'd be interested if anyone has seen
> or heard of any solutions to this type of problem.

You should be able to use hardlinks for this sort of thing.

Make sure you mark them immutable though, otherwise someone in a jail
could compromise other users of those libraries [in another jail].

--
>  
> Daniel O'Connor software and network engineer
> for Genesis Software - http://www.gsoft.com.au
> "The nice thing about standards is that there
> are so many of them to choose from."
>   -- Andrew Tanenbaum
> GPG Fingerprint - 9A8C 569F 685A D928 5140  AE4B 319B 41F4 5D17 FDD5


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1037158610.66058.28.camel>