Improving FreeBSD-SA-07:01.jail fix
Stefan Bethke
stb at lassitu.de
Sat Jan 20 16:52:37 UTC 2007
Am 20.01.2007 um 13:24 schrieb Simon L. Nielsen:
> BTW. with regard to the console.log file I really don't think it
> should be put back inside the jail unless it's possible to make the
> generation of the file entirely inside the jail since it's just not
> worth the risk/complexity.
I'm probably missing something, but why not replace:
_jail_id=$(head -1 ${_tmp_jail})
tail +2 ${_tmp_jail} >${_rootdir}/var/log/console.log
with:
_jail_id=$(head -1 ${_tmp_jail})
tail +2 ${_tmp_jail} | jexec ${_jail_id} sh -c "cat >/var/log/
console.log"
Stefan
--
Stefan Bethke <stb at lassitu.de> Fon +49 170 346 0140
More information about the freebsd-stable
mailing list