Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 24 Apr 2018 10:09:40 -0400
From:      Marc Branchaud <marcnarc@gmail.com>
To:        Glen Barber <gjb@FreeBSD.org>, krad <kraduk@gmail.com>
Cc:        KIRIYAMA Kazuhiko <kiri@kx.openedu.org>, "O'Connor, Daniel" <darius@dons.net.au>, freebsd-stable <freebsd-stable@freebsd.org>
Subject:   Re: What should do in chrooted environment?
Message-ID:  <5bfcd662-629c-43f0-0471-141cf6881a1f@gmail.com>
In-Reply-To: <20180424132452.GB70329@FreeBSD.org>
References:  <201804232228.w3NMS6UW042861@kx.openedu.org> <20180423224408.GC56778@FreeBSD.org> <A07CBD86-5B13-43A9-AF33-EA027B93F209@dons.net.au> <CALfReyeOOgJmnj4Lxxbr4O_YOO9GA_83%2B-Awaz5r4eZAnCJkXw@mail.gmail.com> <20180424132452.GB70329@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2018-04-24 09:24 AM, Glen Barber wrote:
> There are additional nits regarding jail(8) that chroot(8) does not have
> the same limitations.  Setting/unsetting the immutable flag on something
> like /sbin/init, for example, comes to mind.

Try
	allow.chflags
in your jail.conf.

		M.

> Glen
> 
> On Tue, Apr 24, 2018 at 11:49:46AM +0100, krad wrote:
>> wouldn't it just be easier to do this in a jail, and then all of these
>> little bits would be taken care of?
>>
>> On 24 April 2018 at 01:48, O'Connor, Daniel <darius@dons.net.au> wrote:
>>
>>>
>>>
>>>> On 24 Apr 2018, at 08:14, Glen Barber <gjb@FreeBSD.org> wrote:
>>>> I think you might not have the devfs mount in the image.  With the paths
>>>> provided above, I think this should fix it:
>>>>
>>>> # mount -t devfs devfs /mnt/dev
>>>
>>> I wonder if it's worth doing a basic sanity check that /dev/null and
>>> /dev/zero look like device nodes.
>>>
>>> I've made this mistake too and it produces some very confusing error
>>> messages :(
>>>
>>> --
>>> Daniel O'Connor
>>> "The nice thing about standards is that there
>>> are so many of them to choose from."
>>>   -- Andrew Tanenbaum
>>> GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
>>>
>>> _______________________________________________
>>> freebsd-stable@freebsd.org mailing list
>>> https://lists.freebsd.org/mailman/listinfo/freebsd-stable
>>> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
>>>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5bfcd662-629c-43f0-0471-141cf6881a1f>