In message <[EMAIL PROTECTED]>, Jordan Hubbard writes:
>> Once we have an extensible facility for mount options, you will be
>> able to say:
>>      mount -t devfs devfs /home/jail/dev
>>      ( cd /home/jail/dev ; rm $devices_i_dont_want_in_my_jails )
>>      mount -u -o nonewdev /home/jail/dev
>Couldn't you also do "mount -t devfs -o nonewdev devfs /home/jail/dev"
>and then cd /home/jail/dev ; rm $devices_i_dont_want_in_my_jails ?  It
>seems that "read my lips: no new devices" should be an option you can
>set from the very initial mount so that people can't also figure out
>how to get root, remove a /dev entry and replace it with one of their
>own.  Come to think of it, there should also be a -o staticdev option
>to disallow *any* changes after the initial mount.  That would make
>some of our more paranoid sysadmins happy.

That's called "mount -o ro" :-)

I have not finalized the workings of the options, right now we have
a 32-bit bitmap of mountoptions and they're all used up, and I
don't have the time and bikeshedcarpenter hours to design a new
mount option implementation.

Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
[EMAIL PROTECTED]         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to