Skip site navigation (1)Skip section navigation (2)
Date:      06 Mar 2003 17:59:36 +0000
From:      Arthur Chance <arthur-list-bsd@erewhon.demon.co.uk>
To:        freebsd-stable@FreeBSD.ORG
Subject:   Re: jails update
Message-ID:  <873cm074vr.fsf@pooh.wired.qeng-ho.org>
In-Reply-To: Dmitry Morozovsky's message of "Thu, 6 Mar 2003 14:02:37 %2B0300 (MSK)"
References:  <m3znoa8543.fsf@teg.local> <20030305135652.GA83413@ei.bzerk.org> <m3u1ehuc9w.fsf@teg.local> <020c01c2e340$ee8f5c60$19fd2fd8@westbend.net> <m31y1l1xcz.fsf@teg.local> <20030306140038.M43664@woozle.rinet.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
Dmitry Morozovsky <marck@rinet.ru> writes:

> On Wed, 5 Mar 2003, Frank Tegtmeyer wrote:
> 
> FT> One problem with the DESTDIR approach may be the use of
> FT> symlinks by a jail administrator - if there are symlinks set for
> FT> directories containing the binaries you may overwrite the hosts
> FT> directories. Maybe "make installworld" does a check for this too - I
> FT> didn't look at it.
> 
> We avoid this (and the whole need to update multiple jails) by installing to
> dedicated partition and the do multiple read-only null mounts, so each jail has
> perfectly equal read-only /usr (with symlinks outside to /home, /local, etc)

I'm probably misreading this as I'm only just starting to look at the
jail facilities but are you saying symlinks from inside a jail to
outside it work within the jail? Doesn't that defeat the entire point?
Or are you saying /usr/local is e.g. a symlink to /local and you have
a different /local per jail and one for the host as well?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?873cm074vr.fsf>