Am 20.01.2007 um 13:24 schrieb Simon L. Nielsen:
BTW. with regard to the console.log file I really don't think it
should be put back inside the jail unless it's possible to make the
generation of the file entirely inside the jail since it's just not
worth the risk/complexity.
I'm probably missing something, but why not replace:
_jail_id=$(head -1 ${_tmp_jail})
tail +2 ${_tmp_jail} >${_rootdir}/var/log/console.log
with:
_jail_id=$(head -1 ${_tmp_jail})
tail +2 ${_tmp_jail} | jexec ${_jail_id} sh -c "cat >/var/log/
console.log"
Stefan
--
Stefan Bethke <[EMAIL PROTECTED]> Fon +49 170 346 0140
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"