Re: Hierarchical jails

2009-05-15 Thread Julian Elischer
Jilles Tjoelker wrote: On Thu, May 14, 2009 at 11:12:50AM -0600, Jamie Gritton wrote: There's still a change to offer your input on the new jails before they go in! OK, given the lack of response so far, it's less "still a chance" than "please?". Current plans are to have this in place for 8.0

Re: Hierarchical jails

2009-05-14 Thread Jilles Tjoelker
On Thu, May 14, 2009 at 11:12:50AM -0600, Jamie Gritton wrote: > There's still a change to offer your input on the new jails before they > go in! OK, given the lack of response so far, it's less "still a > chance" than "please?". Current plans are to have this in place for > 8.0, with connections

Re: Hierarchical jails

2009-05-14 Thread Jamie Gritton
Jilles Tjoelker wrote: On Thu, May 14, 2009 at 11:12:50AM -0600, Jamie Gritton wrote: There's still a change to offer your input on the new jails before they go in! OK, given the lack of response so far, it's less "still a chance" than "please?". Current plans are to have this in place for 8.0

Re: Hierarchical jails

2009-05-14 Thread Jamie Gritton
Julian Elischer wrote: Jamie Gritton wrote: prison0 contains three fields that were system globals: pr_root, pr_host, and pr_securelevel. I've kept the globals rootvnode and hostname, and take care that when one is changed the other changes too (not yet true for hostname - read on). But I've a

Re: Hierarchical jails

2009-05-14 Thread Julian Elischer
Jamie Gritton wrote: There's still a change to offer your input on the new jails before they go in! OK, given the lack of response so far, it's less "still a chance" than "please?". Current plans are to have this in place for 8.0, with connections to the ongoing Vimage work. Hopefully the sile

Re: Hierarchical jails

2009-05-14 Thread Jamie Gritton
There's still a change to offer your input on the new jails before they go in! OK, given the lack of response so far, it's less "still a chance" than "please?". Current plans are to have this in place for 8.0, with connections to the ongoing Vimage work. Hopefully the silence is approval, and c

Re: Hierarchical jails

2009-05-09 Thread Miroslav Lachman
Jamie Gritton wrote: Here's the first round of hierarchical jails under the new framework. Instead of creds having either a prison or a NULL pointer, they all have a prison pointer with the default being the global "prison0" that contains information about the real environment. Jailed root may

Re: Hierarchical jails

2009-05-08 Thread Julian Elischer
Jamie Gritton wrote: Here's the first round of hierarchical jails under the new framework. Instead of creds having either a prison or a NULL pointer, they all have a prison pointer with the default being the global "prison0" that contains information about the real environment. Jailed root may