From owner-freebsd-isp  Tue Oct  2  3:22: 7 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from relay2.agava.net.ru (ofc.agava.net [213.59.3.194])
	by hub.freebsd.org (Postfix) with ESMTP id DF5B837B40A
	for <isp@freebsd.org>; Tue,  2 Oct 2001 03:22:01 -0700 (PDT)
Received: from hellbell.domain (hellbell.domain [192.168.1.12])
	by relay2.agava.net.ru (Postfix) with ESMTP
	id 3D4DD4361F; Tue,  2 Oct 2001 14:21:59 +0400 (MSD)
Received: from localhost (localhost [127.0.0.1])
	by hellbell.domain (Postfix) with ESMTP
	id C25DCCCF6; Tue,  2 Oct 2001 14:10:46 +0400 (MSD)
Date: Tue, 2 Oct 2001 14:10:46 +0400 (MSD)
From: Alexey Zakirov <frank@agava.com>
X-X-Sender:  <frank@hellbell.domain>
To: Henk Wevers <henk@wevers.org>
Cc: <francisv@dagupan.com>, <isp@freebsd.org>
Subject: RE: jail + quota
In-Reply-To: <001b01c14b26$b37982d0$07000a0a@kpnlep>
Message-ID: <Pine.BSF.4.32.0110021409140.46302-100000@hellbell.domain>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Tue, 2 Oct 2001, Henk Wevers wrote:

> Inside a jail chflags does not work, so make the quota.group file append
> only or something.

It doesn't need to have quota.* inside the jail. Even worst - it's
potential security compromise.

> -----Original Message-----
> From: francisv@dagupan.com [mailto:francisv@dagupan.com]
> Sent: dinsdag 2 oktober 2001 4:24
> To: henk@wevers.org
> Cc: isp@freebsd.org
> Subject: RE: jail + quota
>
> Henk,
>
> Since the client has full root access on the jail environment, what
> would
> stop him from removing the quota restrictions on the group?
>
> > -----Original Message-----
> > From: Henk Wevers [mailto:henk@wevers.org]
> > Sent: Tuesday, October 02, 2001 4:38 AM
> > To: francisv@dagupan.com; isp@freebsd.org
> > Subject: RE: jail + quota
> >
> > Hi,
> >
> > There is a sort of workaround to quota's in a jail.
> > I have it documented in http://jailnotes.cg.nu
> >
> >
> > Henk Wevers
> >
> > -----Original Message-----
> > From: owner-freebsd-isp@FreeBSD.ORG
> > [mailto:owner-freebsd-isp@FreeBSD.ORG] On Behalf Of
> francisv@dagupan.com
> > Sent: maandag 1 oktober 2001 7:56
> > To: isp@freebsd.org
> > Subject: jail + quota
> >
> > Hi,
> >
> > How do you enforce quota restrictions on a jail account?
> >
> > ---
> >  francis vidal [bitstop network services]
> >  streaming media + web services
> >  v(02)330-2871,(02)330-2872
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-isp" in the body of the message
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>

*** WBR, Alexey Zakirov (frank@agava.com)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message