Date: Thu, 08 Aug 2013 07:05:26 -0500 From: Mark Felder <feld@FreeBSD.org> To: freebsd-stable@freebsd.org Subject: Re: ZFS in jails 9.2-RC1 permission denied Message-ID: <1375963526.32115.7488635.39B9BAB2@webmail.messagingengine.com> In-Reply-To: <alpine.BSF.2.00.1308081356490.90799@mail.fig.ol.no> References: <CA%2BdUSyqDY9CQUrTDGNT5xwGjRce=JvAJrJHATxAocvffbz=ewg@mail.gmail.com> <CA%2BdUSypajBopACJt4HiNOGGYb2RqSfvrL0iP3eA_j%2BRd7hVi%2BA@mail.gmail.com> <alpine.BSF.2.00.1308081356490.90799@mail.fig.ol.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Aug 8, 2013, at 6:59, Trond Endrest=F8l wrote: >=20 > I'm just guessing, but I doubt a jail would be able to create new ZFS=20 > filesystems outside its own structure, if at all able. A jail would=20 > however be allowed to (un)mount already existing filesystems within=20 > its own structure, i.e. Pool/test1. >=20 When I first reviewed his post I clearly confused "mounting" with "creating a new zfs filesystem". Is that even supposed to be permitted in a jail? I almost feel a sysctl disabling that by default would be nice... DoS by zfs filesystem creation/deletion, anyone?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1375963526.32115.7488635.39B9BAB2>