request for (security) comments on this setup

[Marco Steinbach]

Randy Schultz wrote:
> Heya,
> 
> I'm mounting some iSCSI storage in a jail.  It's mounting in the jail via
> fstab.<jailname>.  When the jail is up and I'm logged into the jail I 
> can cd
> to the mount point, r/w etc., everything seems to work.  What's weird 
> tho' is,
> while a df on the parent shows the partion mounted as expected, a df inside
> the jail shows the local disk but not the iSCSI mount.

A tad bit late, I realize.

If you're not using any applications in need of being able to enumerate 
all mounted filesystems from within the jail, I'd leave 
security.jail.enforce_statfs alone, and simply use df <mountpoint>.

MfG CoCo