Re: Securely sharing directories between jails

2012-02-01 Thread Roland Smith
On Wed, Feb 01, 2012 at 08:30:31AM +0100, Stas Verberkt wrote: L.S., I want to set up my system in a way where applications are clustered over jails, e.g. a httpd, smbd and dbmsd jail. However, in most cases I need to share data over the jails, which is stored on the host. Often, nullfs and

Securely sharing directories between jails

2012-01-31 Thread Stas Verberkt
L.S., I want to set up my system in a way where applications are clustered over jails, e.g. a httpd, smbd and dbmsd jail. However, in most cases I need to share data over the jails, which is stored on the host. Often, nullfs and mounting ro is suitable, but I need write access in some cases. As

Re: Sharing directories with jails

2005-03-04 Thread Viren Patel
On Thursday 03 March 2005 05:23 pm, Ean Kingston wrote: On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote: [cut original question and answer] Ok perhaps I should clarify what my intentions are a little more. I am planning on providing a FreeBSD jail for any member of a geek

Re: Sharing directories with jails

2005-03-04 Thread Anish Mistry
On Friday 04 March 2005 10:24 am, Viren Patel wrote: On Thursday 03 March 2005 05:23 pm, Ean Kingston wrote: On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote: [cut original question and answer] Ok perhaps I should clarify what my intentions are a little more. I am

Sharing directories with jails

2005-03-03 Thread Chris Hodgins
How dangerous is it to share the ports directory with jails on the system? I am using the jails to give other access to a freebsd system. You can assume they are untrusted (hence the jail ;)). Is it enough just to: ln -s /usr/ports /usr/jail/ajail/usr/ports Thanks Chris

Re: Sharing directories with jails

2005-03-03 Thread Ean Kingston
How dangerous is it to share the ports directory with jails on the system? I am using the jails to give other access to a freebsd system. You can assume they are untrusted (hence the jail ;)). Is it enough just to: ln -s /usr/ports /usr/jail/ajail/usr/ports That won't work. The jail

Re: Sharing directories with jails

2005-03-03 Thread Chris Hodgins
Ean Kingston wrote: How dangerous is it to share the ports directory with jails on the system? I am using the jails to give other access to a freebsd system. You can assume they are untrusted (hence the jail ;)). Is it enough just to: ln -s /usr/ports /usr/jail/ajail/usr/ports That won't work.

Re: Sharing directories with jails

2005-03-03 Thread Anish Mistry
On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote: Ean Kingston wrote: How dangerous is it to share the ports directory with jails on the system? I am using the jails to give other access to a freebsd system. You can assume they are untrusted (hence the jail ;)). Is it enough

Re: Sharing directories with jails

2005-03-03 Thread Ean Kingston
On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote: [cut original question and answer] Ok perhaps I should clarify what my intentions are a little more. I am planning on providing a FreeBSD jail for any member of a geek society I am a member of. When I say they are untrusted, I mean

Re: Sharing directories with jails

2005-03-03 Thread Anish Mistry
On Thursday 03 March 2005 05:23 pm, Ean Kingston wrote: On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote: [cut original question and answer] Ok perhaps I should clarify what my intentions are a little more. I am planning on providing a FreeBSD jail for any member of a geek

Re: Sharing directories with jails

2005-03-03 Thread Emanuel Strobl
Am Donnerstag, 3. März 2005 17:04 schrieb Ean Kingston: How dangerous is it to share the ports directory with jails on the system? I am using the jails to give other access to a freebsd system. You can assume they are untrusted (hence the jail ;)). Is it enough just to: ln -s

RE: Sharing directories with jails

2005-03-03 Thread Daniel Eriksson
Emanuel Strobl wrote: You can also use nullfs (man (8) mount_nullfs). It's slow and not certified to be bugfree but I never had any problems and especially for centralized ports very useful. What has given you the idea that nullfs is slow? I'm using it extensively and have not noticed any

Re: Sharing directories with jails

2005-03-03 Thread Chris Hodgins
Daniel Eriksson wrote: Emanuel Strobl wrote: You can also use nullfs (man (8) mount_nullfs). It's slow and not certified to be bugfree but I never had any problems and especially for centralized ports very useful. What has given you the idea that nullfs is slow? I'm using it extensively and

Re: Sharing directories with jails

2005-03-03 Thread Emanuel Strobl
Am Freitag, 4. März 2005 01:50 schrieb Daniel Eriksson: Emanuel Strobl wrote: You can also use nullfs (man (8) mount_nullfs). It's slow and not certified to be bugfree but I never had any problems and especially for centralized ports very useful. What has given you the idea that nullfs is