cvs commit: src/usr.sbin/jexec jexec.8 jexec.c

[Pawel Jakub Dawidek]

On Mon, May 26, 2008 at 11:57:49AM +0000, Michael Reifenberger wrote:
> mr          2008-05-26 11:57:49 UTC
> 
>   FreeBSD src repository
> 
>   Modified files:
>     usr.sbin/jexec       jexec.8 jexec.c 
>   Log:
>   Extend jexec to accept hostname or ip-number besides jail-id.

As many already suggested using IP numbers and hostnames can be tricky
(and risky). What do you think about using jail name from /etc/rc.conf?
When a name is given, jexec could read /var/run/jail_<name>.id and use
jail ID from there?

I know it will only work with jails created by rc.d/jail, but I think
it's good enough.

PS. I'm not against this functionality, but we should be much more
    careful, especially with hostnames when
    security.jail.set_hostname_allowed=1.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd at FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/cvs-src/attachments/20080528/04eaecdf/attachment.pgp