Hi all, in FreeBSD 8.2-RELEASE it does not seem to be possible to pass children.max=X to a jail via rc.conf. What would be the best way of doing this? The next issue is what kind of security review/testing is needed to declare nullfs jailsafe but for now I can still bind my paths.
My biggest problem right now is the devfs. Is it possible to have /dev statically populated and have it work inside a jail? E.g. an attempt to create /dev/null and have it available to the jail is failing, I was cheating and binding (via nullfs) a /dev from another jail and it started but I am having difficulties when building things from the ports tree and it seems to be /dev related. So really quick question. Is there a way to statically populate the dev tree with the minimum of needed descriptors? A first try with mknod /jail/dev/null c 0... did not seem to work. regards holger _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
