diff options
| author | bcr <bcr@FreeBSD.org> | 2011-05-08 14:57:01 +0000 |
|---|---|---|
| committer | bcr <bcr@FreeBSD.org> | 2011-05-08 14:57:01 +0000 |
| commit | 4ef09d2b795b86a23ac3ddbe59a818fc3bb925d2 (patch) | |
| tree | 9feb1d06eb16b4ba0fc09720b3ad573ed53684fe /usr.sbin | |
| parent | b838671bb4661d8bd3ad95d511c0b7bcd93a5c4b (diff) | |
| download | FreeBSD-src-4ef09d2b795b86a23ac3ddbe59a818fc3bb925d2.zip FreeBSD-src-4ef09d2b795b86a23ac3ddbe59a818fc3bb925d2.tar.gz | |
Revert r221655:
Various people voiced their concerns about these changes.
Until this is resolved, we should use the old version.
Diffstat (limited to 'usr.sbin')
| -rw-r--r-- | usr.sbin/jail/jail.8 | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8 index b3f0b03..893efd84 100644 --- a/usr.sbin/jail/jail.8 +++ b/usr.sbin/jail/jail.8 @@ -34,7 +34,7 @@ .\" .\" $FreeBSD$ .\" -.Dd May 8, 2011 +.Dd January 17, 2010 .Dt JAIL 8 .Os .Sh NAME @@ -431,7 +431,7 @@ command script can be used: .Bd -literal D=/here/is/the/jail cd /usr/src -mkdir -p -m 0700 $D +mkdir -p $D make world DESTDIR=$D make distribution DESTDIR=$D mount -t devfs devfs $D/dev @@ -448,10 +448,6 @@ in the per-jail devfs. A simple devfs ruleset for jails is available as ruleset #4 in .Pa /etc/defaults/devfs.rules . .Pp -Non-superusers in the host system should not be able to access the -jail's files; otherwise an attacker with root access to the jail -could obtain elevated privileges on the host. -.Pp In many cases this example would put far more in the jail than needed. In the other extreme case a jail might contain only one file: the executable to be run in the jail. |
