Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Oct 2001 14:10:46 +0400 (MSD)
From:      Alexey Zakirov <frank@agava.com>
To:        Henk Wevers <henk@wevers.org>
Cc:        <francisv@dagupan.com>, <isp@freebsd.org>
Subject:   RE: jail + quota
Message-ID:  <Pine.BSF.4.32.0110021409140.46302-100000@hellbell.domain>
In-Reply-To: <001b01c14b26$b37982d0$07000a0a@kpnlep>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 2 Oct 2001, Henk Wevers wrote:

> Inside a jail chflags does not work, so make the quota.group file append
> only or something.

It doesn't need to have quota.* inside the jail. Even worst - it's
potential security compromise.

> -----Original Message-----
> From: francisv@dagupan.com [mailto:francisv@dagupan.com]
> Sent: dinsdag 2 oktober 2001 4:24
> To: henk@wevers.org
> Cc: isp@freebsd.org
> Subject: RE: jail + quota
>
> Henk,
>
> Since the client has full root access on the jail environment, what
> would
> stop him from removing the quota restrictions on the group?
>
> > -----Original Message-----
> > From: Henk Wevers [mailto:henk@wevers.org]
> > Sent: Tuesday, October 02, 2001 4:38 AM
> > To: francisv@dagupan.com; isp@freebsd.org
> > Subject: RE: jail + quota
> >
> > Hi,
> >
> > There is a sort of workaround to quota's in a jail.
> > I have it documented in http://jailnotes.cg.nu
> >
> >
> > Henk Wevers
> >
> > -----Original Message-----
> > From: owner-freebsd-isp@FreeBSD.ORG
> > [mailto:owner-freebsd-isp@FreeBSD.ORG] On Behalf Of
> francisv@dagupan.com
> > Sent: maandag 1 oktober 2001 7:56
> > To: isp@freebsd.org
> > Subject: jail + quota
> >
> > Hi,
> >
> > How do you enforce quota restrictions on a jail account?
> >
> > ---
> >  francis vidal [bitstop network services]
> >  streaming media + web services
> >  v(02)330-2871,(02)330-2872
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-isp" in the body of the message
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>

*** WBR, Alexey Zakirov (frank@agava.com)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.32.0110021409140.46302-100000>