svn commit: r233048 - head/etc/defaults
Alexander Leidinger
Alexander at Leidinger.net
Sat Mar 17 16:15:06 UTC 2012
On Fri, 16 Mar 2012 21:30:26 +0000 (UTC) Martin Matuska
<mm at FreeBSD.org> wrote:
> Author: mm
> Date: Fri Mar 16 21:30:26 2012
> New Revision: 233048
> URL: http://svn.freebsd.org/changeset/base/233048
>
> Log:
> Unhide /dev/zfs in devfsrules_jail.
>
> The /dev/zfs device is required for managing jailed ZFS datasets.
This may give more info to a jail (ZFS is in use on this machine) than
what someone may want to provide. I have separate rulesets for jails
without and with ZFS (actually the one without is the default one and
the one with is a new one):
---snip---
...
[devfsrules_unhide_zfs=12]
add path zfs unhide
...
[devfsrules_jail_withzfs=16]
add include $devfsrules_hide_all
add include $devfsrules_unhide_basic
add include $devfsrules_unhide_login
add include $devfsrules_unhide_zfs
---snip---
Anyone with arguments why this may be overly paranoid? If not, I would
suggest that we go this way instead.
Bye,
Alexander.
--
http://www.Leidinger.net Alexander @ Leidinger.net: PGP ID = B0063FE7
http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID = 72077137
More information about the svn-src-head
mailing list