diff options
| author | phk <phk@FreeBSD.org> | 1999-07-09 21:35:37 +0000 |
|---|---|---|
| committer | phk <phk@FreeBSD.org> | 1999-07-09 21:35:37 +0000 |
| commit | 67e84e4db59573d18a0ad7f12b6be3d7eff341e6 (patch) | |
| tree | 41e7bef68e17bdedc28eb267ef094cd87096df5d /lib | |
| parent | f4278e671154b26810ecc718df2225808e6aa41f (diff) | |
| download | FreeBSD-src-67e84e4db59573d18a0ad7f12b6be3d7eff341e6.zip FreeBSD-src-67e84e4db59573d18a0ad7f12b6be3d7eff341e6.tar.gz | |
Clarify an explanation a little bit.
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/libc/sys/jail.2 | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/lib/libc/sys/jail.2 b/lib/libc/sys/jail.2 index 86827e4..693bbcc 100644 --- a/lib/libc/sys/jail.2 +++ b/lib/libc/sys/jail.2 @@ -6,7 +6,7 @@ .\"this stuff is worth it, you can buy me a beer in return. Poul-Henning Kamp .\"---------------------------------------------------------------------------- .\" -.\"$Id: jail.2,v 1.2 1999/05/16 10:51:42 phk Exp $ +.\"$Id: jail.2,v 1.3 1999/06/17 23:43:35 green Exp $ .\" .\" .Dd April 28, 1999 @@ -53,11 +53,16 @@ the prison. It is not possible to add a process to a preexisting prison. .Pp Inside the prison, the concept of "superuser" is very diluted. In general, it can be assumed that nothing can be mangled from inside a prison which -doesn't exist inside that prison (ie: the directory tree below -.Dq Li path . +doesn't exist entirely inside that prison. For instance the directory +tree below +.Dq Li path +can be manipulated all the ways a root can normally do it, including +.Dq Li "rm -rf /*" +but new device special notes cannot be created because the reference +shared resources (the device drivers in the kernel). .Pp All IP activity will be forced to happen to/from the IP number specified, -which should be an alias on one of the systems interfaces. +which should be an alias on one of the network interfaces. .Pp It is possible to identify a process as jailed by examining .Dq Li /proc/<pid>/status : |
