Jail organization

[Harald Schmalzbauer]

Am Montag, 26. April 2004 16:03 schrieb Chad Leigh -- Shire.Net LLC:
> On Apr 26, 2004, at 5:42 AM, Harald Schmalzbauer wrote:
> > Use mount_nullfs whenever you need more than the spezialized jail
> > itself was
> > designed for, eg. when installing a new port
> > mount_nullfs /hostusr/ports /jailuser/ports.
> > I explicitly use one single label for each jail. Don't forget in case
> > of a
> > compromised jail the hacker could simply fill up your filesystem when
> > you use
> > only directories.
> >
> > -Harry
>
> I have stated away from mount_nullfs because the man page for it (on
> 5-2-CURRENT) still says:
>
> BUGS
>       THIS FILE SYSTEM TYPE IS NOT YET FULLY SUPPORTED (READ: IT DOESN'T
> WORK)
>       AND USING IT MAY, IN FACT, DESTROY DATA ON YOUR SYSTEM.  USE AT
> YOUR OWN
>       RISK.  BEWARE OF DOG.  SLIPPERY WHEN WET.
>
>       This code also needs an owner in order to be less dangerous -
> serious
>       hackers can apply by sending mail to <hackers at FreeBSD.org> and
> announcing
>       their intent to take it over.
>
> HISTORY
>       The mount_nullfs utility first appeared in 4.4BSD.
>
>
> Is this still true?  Is it safe to use, at least in a read only
> situation?

Oh, I've never had a look into the man page. And I haven't beed using it for 
long nor at high load scenarios but for me it works (tm).
In production I use it readonly but I also haven't had any problems in 
read-write operation. But consider it as a nullfs-newbie report!

-Harry

>
> I have been remounting various parts of the filesystem in read only
> state using nfs from the local filesystem, ie,
>
> % mount localhost:/jailmaster/usr /jail/usr
>
> Chad
>
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"

-- 
Please never add my reply address to CC nor to the recipient list!
If you make "answers to all" please remove my address!!!!!!!!!!!!!
I'll complain if I see my reply address on any mailinglist!!!!!!!!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040426/d8b140bb/attachment.bin