Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 8 Nov 2001 21:44:41 -0500
From:      "Kutulu" <kutulu@kutulu.org>
To:        "Kutulu" <kutulu@kutulu.org>, "Anthony Atkielski" <anthony@atkielski.com>, "Giorgos Keramidas" <charon@labs.gr>, <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Re[2]: Tiny starter configuration for FreeBSD
Message-ID:  <01cf01c168c8$7c3328c0$88682518@longhill1.md.home.com>
References:  <15330.6606.417524.41024@guru.mired.org><002b01c1635f$5a5f4300$0a00000a@atkielski.com> <15330.14419.809266.281360@guru.mired.org> <007e01c1636e$97016d10$0a00000a@atkielski.com> <20011108021537.E79276@hades.hell.gr> <002801c1682c$818807b0$0a00000a@atkielski.com> <20011108154407.B2965@hades.hell.gr> <009801c1688d$0b18d9e0$0a00000a@atkielski.com> <01af01c168c7$d0d70e60$88682518@longhill1.md.home.com>

next in thread | previous in thread | raw e-mail | index | archive | help

----- Original Message -----
From: "Kutulu" <kutulu@kutulu.org>
To: "Anthony Atkielski" <anthony@atkielski.com>; "Giorgos Keramidas"
<charon@labs.gr>; <freebsd-questions@FreeBSD.ORG>
Sent: Thursday, November 08, 2001 9:39 PM
Subject: Re: Re[2]: Tiny starter configuration for FreeBSD


> ----- Original Message -----
> From: "Anthony Atkielski" <anthony@atkielski.com>
> To: "Giorgos Keramidas" <charon@labs.gr>; <freebsd-questions@FreeBSD.ORG>
> Sent: Thursday, November 08, 2001 2:39 PM
> Subject: Re: Re[2]: Tiny starter configuration for FreeBSD
>
>
> > Giorgos writes:
> >
> > > If the need for Telnet arises (someone who
> > > doesn't have an SSH client on their Windows
> > > box), I have set up a jail ...
> >
> > What's a jail?  (Apart from the common definition, of course--I assume
> this is
> > something special in FreeBSD.)
>
> A jail is a chroot'd environment whereby the processes running with it are
> restricted in what resources (primarily files/directories, but also
sockets
> and such) they will be able to see.  Anything outside of the virtual root
of
> the jail is not only inaccessable, but won't even appear to exist to
> processes running inside the jail.  Examples you'll probably recognize are
> the "sandbox" people often run BIND in, or the FTP anonymous root
directory.

Well, I should correct myself here, in that these examples are not jails,
but merely chroot'd environments.  A jail is very similar (in fact, it sets
up a chroot internally) but also limits the machine's hostname/IP address,
and prevents access to shared resources.  I think there's a man page (maybe
even two) for it.

--K



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01cf01c168c8$7c3328c0$88682518>