Attachment 75472 Details for Bug 109008 – file.diff

[patch] file.diff

file.diff (text/plain), 985 bytes, created by Chris Haulmark on 2007-02-10 06:50:14 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Chris Haulmark

Created: 2007-02-10 06:50:14 UTC

Size: 985 bytes

patch

obsolete

>--- jexec.8	Thu Jun  8 12:29:05 2006
>+++ jexec.8-edited	Sat Feb 10 00:32:35 2007
>@@ -53,6 +53,23 @@
> The user name from jailed environment as whom the
> .Ar command
> should run.
>+.Sh DESIGN NOTES
>+Administrator have to be aware that non-jailed users
>+can kill processes owned by the same UID that are
>+running in jail environments.  It is suggested that
>+the administrators do not create user accounts outside
>+the jail enviornments with the same UIDs as the accounts
>+inside the jail.  Exactly same problem exists with file
>+system objects and this can't be sloved in this way,
>+because no information about jail exists in file's inode
>+and users outside of jail are not chrooted.
>+
>+If administrator is running virtual servers with jail and
>+with regular users inside those virtual servers, it is
>+recommended that there should be no users accounts on this
>+machine outside the jail environments.
>+
>+This above is an expected behavior.
> .Sh SEE ALSO
> .Xr jail_attach 2 ,
> .Xr jail 8 ,

Actions: View | Diff

Attachments on bug 109008: 75472