Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Dec 2015 15:09:44 -0500
From:      Jake <>
To:        Anton Sayetsky <>
Cc:        =?utf-8?Q?Lu=C3=ADs_Fernando_Schultz_Xavier_da_Silveira?= <>,
Subject:   Re: OSS in jail
Message-ID:  <>
In-Reply-To: <>
References:  <20151206194401.GA3860@hpmini> <> <20151206194958.GB4044@hpmini> <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
> On Dec 6, 2015, at 2:51 PM, Anton Sayetsky <> wrote:
> 2015-12-06 21:49 GMT+02:00 Lu=C3=ADs Fernando Schultz Xavier da Silveira
> <>:
>> Sorry, I meant write-only mode.
> If a user has write access, how do you want to prevent him to set permissi=

I think that's what he's asking us, the general community. Maybe not for a s=
olution as simple as the standard device nodes and permissions, since he als=
o described his use case as the actual goal. Without actually forming a spec=
ific plan for u in detail, a setup involving network send/receive and on a s=
olution such as what Jack2 (and others) provide comes to mind. That may work=
 for you Fernando or it may not be low-level enough to fit all your desires.=
 Perhaps a simpler solution using the append-only file flag would suffice an=
d disallowing the jail to change flags is workable. See allow.chflags in man=
 8 jail and/or man 5 jail.conf. I believe there's a global setting and a per=
 jail setting.

I'm interested in hearing about what solutions you/we can come up with.=

Want to link to this message? Use this URL: <>