In message <[EMAIL PROTECTED]> Jordan Hubbard writes:
: Couldn't you also do "mount -t devfs -o nonewdev devfs /home/jail/dev"
: and then cd /home/jail/dev ; rm $devices_i_dont_want_in_my_jails ? It
: seems that "read my lips: no new devices" should be an option you can
: set from the very initial mount so that people can't also figure out
: how to get root, remove a /dev entry and replace it with one of their
: own. Come to think of it, there should also be a -o staticdev option
: to disallow *any* changes after the initial mount. That would make
: some of our more paranoid sysadmins happy.
My concern is that I usually know what devices I want (/dev/null,
/dev/zero, /dev/tty). That makes it harder to delete all of them not
on the list.
Warner
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
