Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Dec 2015 15:40:08 +0100
From:      Michael Firnau <mfi@tf.uni-kiel.de>
To:        Aleksandr Miroslav <alexmiroslav@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: best practice for locking down private jail?
Message-ID:  <20151210144007.GA23555@fanty-a.tf.uni-kiel.de>
In-Reply-To: <CACcSE1zhMLnbo+bOixOM_ZLBpP+szbmzfFH_12v36ezy34fs9g@mail.gmail.com>
References:  <CACcSE1yQO8AjW9rpY+d2p1-ArPbO4qKV0zcaCMyRhYEWLOpQGA@mail.gmail.com> <20151203073923.17dae0c41a2b5e29a5b3a3dd@sohara.org> <CACcSE1zhMLnbo+bOixOM_ZLBpP+szbmzfFH_12v36ezy34fs9g@mail.gmail.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Thu, Dec 03, 2015 at 06:45:16PM -0800, Aleksandr Miroslav wrote:
> On Wed, Dec 2, 2015 at 11:39 PM, Steve O'Hara-Smith <steve@sohara.org> wrote:
> > I would set up two jails - one as the upload jail the other the web
> > server and use a cron job on the host to move verified mp3 files
> 
> Excellent advice, I will do just that.

I think the cron job isn't needed. Create a directory outside the jails
and mount it as nullfs and 'rw' into the upload jail and 'ro' into the
web server jail. We do this on a zfs basis.



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20151210144007.GA23555>