From owner-freebsd-doc@FreeBSD.ORG Wed Feb 10 13:36:27 2010 Return-Path: Delivered-To: freebsd-doc@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C0D4B106566B; Wed, 10 Feb 2010 13:36:27 +0000 (UTC) (envelope-from mozolevsky@gmail.com) Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.27]) by mx1.freebsd.org (Postfix) with ESMTP id 307118FC13; Wed, 10 Feb 2010 13:36:26 +0000 (UTC) Received: by ey-out-2122.google.com with SMTP id 25so46122eya.9 for ; Wed, 10 Feb 2010 05:36:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:from:date:x-google-sender-auth:message-id:subject:to:cc :content-type; bh=ALsHdcwnvNbX2JiojnFq896eLZzdeaFX4/2qRoov31o=; b=ss9otR+LE2Ai3w+rXFQ683BYoX92uwXJ5bkvmaxeYyQqdN3BZtBjE9RC+Mvny49Yxh QPQ7cxijJIrE2q7VLZr657HiNf6HVpDUZtRbuWRrLs6ASKlggWwoHwcSrmXVpd0+C1Yq XTqwVp2sqEX+oN8XHNdzqy0nlinezs13dB2gc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=wVRnm9YyPVzeC9y6VzHwqrWapTZYK49kPhYHVs+DcAc9M9zuNTnaE5Wfap/znP4Flg q6/tcoNBHCqoAbiMjn52s1qynWDcj3t/gLsWZzElhWshXxb5S7u8nuZqALpH8uLT7Yu9 x7tmzO1SVjbUNPUadqhkcaRf0afuLbLWTYFfU= MIME-Version: 1.0 Sender: mozolevsky@gmail.com Received: by 10.213.96.198 with SMTP id i6mr187795ebn.45.1265807471132; Wed, 10 Feb 2010 05:11:11 -0800 (PST) In-Reply-To: <4B72A0DB.5010806@eng.auth.gr> References: <4B72A0DB.5010806@eng.auth.gr> From: Igor Mozolevsky Date: Wed, 10 Feb 2010 13:10:32 +0000 X-Google-Sender-Auth: 54efd51ee877bb46 Message-ID: To: George Mamalakis Content-Type: text/plain; charset=UTF-8 Cc: freebsd-doc@freebsd.org, freebsd-stable Subject: Re: A more secure approach of jail establishment. It could be included in jail chapter of fbsd handbook X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2010 13:36:27 -0000 I see people are still installing a full blown OS inside their jails? You do know that it is possible to have a jail with a single program inside and not much else, as if it were chroot()ed? Cheers, Igor