Skip site navigation (1)Skip section navigation (2)
Date:      10 Sep 2005 08:57:08 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        ruben@bloemgarten.demon.nl
Cc:        freebsd-questions@freebsd.org
Subject:   Re: /dev/mem /dev/kmem jails and using netstat -r and snmp
Message-ID:  <44mzml3wt7.fsf@be-well.ilk.org>
In-Reply-To: <20050909220030.943A643D46@mx1.FreeBSD.org>
References:  <20050909220030.943A643D46@mx1.FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
"Ruben Bloemgarten" <rubenl@bloemgarten.demon.nl> writes:

> I seem to be a bit stuck here. I seem  to need access to /dev/mem and
> /dev/kmem from inside a jail . Specifically to be able to use netstat =C2=
=96r and
> snmp in jailed environments. I=C2=92m running FBSD 5.4-RELEASE. Could any=
one help
> me shed some light on this problem ? Thanks.=20

Making kmem available in a jail seems like it can't be the right
answer to anything.  Kind of contradicts the point, I would think.

I don't see an easy way around this.  Furthermore, there are different
approaches depending on why you are trying to do this.  If you want
system statistics inside of a jail for remote monitoring, consider
whether that is the best approach; after all, network management *is*
a fundamentally privileged operation.  One way to do it would be to
feed the statistics into the jail from outside of it; this way, the
privileged operation is separated from the network-accessible code,
and not dependent on it in any way.

Good luck.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44mzml3wt7.fsf>