Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Oct 2001 15:46:14 +0400 (MSD)
From:      Alexey Zakirov <frank@agava.com>
To:        Roman Korolyov <rk@inetcomm.net>
Cc:        <isp@FreeBSD.ORG>
Subject:   Re: jail + quota
Message-ID:  <Pine.BSF.4.32.0110021536440.46777-100000@hellbell.domain>
In-Reply-To: <20011002113423.E5A9A17ECE@mail.inetcomm.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 2 Oct 2001, Roman Korolyov wrote:

> > In every jail you can create special group for root account and limit
> > that group instead of uid 0.
>
> How do you prevent root from editing passwd/group files and changing group
> if owner of this jail needs to add/remove other user accounts inside this jail?
> How do you add all newly-created users inside jail to this group?

Probably only with special custom tools which  create/delete users from
the master environment and having schg,sunlnk onto every security
sensitive file in a jail.

*** WBR, Alexey Zakirov (frank@agava.com)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.32.0110021536440.46777-100000>