From owner-freebsd-isp Tue Oct 2 4:46:28 2001 Delivered-To: freebsd-isp@freebsd.org Received: from relay2.agava.net.ru (ofc.agava.net [213.59.3.194]) by hub.freebsd.org (Postfix) with ESMTP id C081D37B401 for ; Tue, 2 Oct 2001 04:46:16 -0700 (PDT) Received: from hellbell.domain (hellbell.domain [192.168.1.12]) by relay2.agava.net.ru (Postfix) with ESMTP id CB39B43742; Tue, 2 Oct 2001 15:40:32 +0400 (MSD) Received: from localhost (localhost [127.0.0.1]) by hellbell.domain (Postfix) with ESMTP id EA67ECCF6; Tue, 2 Oct 2001 15:46:14 +0400 (MSD) Date: Tue, 2 Oct 2001 15:46:14 +0400 (MSD) From: Alexey Zakirov X-X-Sender: To: Roman Korolyov Cc: Subject: Re: jail + quota In-Reply-To: <20011002113423.E5A9A17ECE@mail.inetcomm.ru> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, 2 Oct 2001, Roman Korolyov wrote: > > In every jail you can create special group for root account and limit > > that group instead of uid 0. > > How do you prevent root from editing passwd/group files and changing group > if owner of this jail needs to add/remove other user accounts inside this jail? > How do you add all newly-created users inside jail to this group? Probably only with special custom tools which create/delete users from the master environment and having schg,sunlnk onto every security sensitive file in a jail. *** WBR, Alexey Zakirov (frank@agava.com) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message