From owner-freebsd-stable@FreeBSD.ORG  Sun Feb 16 14:22:31 2014
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 949FB48F
 for <freebsd-stable@freebsd.org>; Sun, 16 Feb 2014 14:22:31 +0000 (UTC)
Received: from mail.tyknet.dk (mail.tyknet.dk
 [IPv6:2a01:4f8:201:2327:144:76:253:226])
 (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 3931E11B5
 for <freebsd-stable@freebsd.org>; Sun, 16 Feb 2014 14:22:30 +0000 (UTC)
Received: from [10.10.1.102] (217.71.4.82.static.router4.bolignet.dk
 [217.71.4.82])
 (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))
 (No client certificate requested)
 by mail.tyknet.dk (Postfix) with ESMTPSA id 0B72D1239EA
 for <freebsd-stable@freebsd.org>; Sun, 16 Feb 2014 14:22:20 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.8.3 mail.tyknet.dk 0B72D1239EA
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=gibfest.dk; s=default;
 t=1392560541; bh=ihDa3ih0i/p4CDiQUSnX5g4V9OpDDuXDnPccXOoqA+Y=;
 h=Date:From:To:Subject:References:In-Reply-To;
 b=fKf07c31pw345ycQLVKyILabrieAz0vtkMLoSQ73sZZ8SwSBscO3f7JO/IESllWoz
 sDfSadWajBz0uhZsfF86Qci1Few6G7PAZVaY/zLjuL9oSrLT8ZeNz9HyTzJt8UfKTX
 rCu4Uy2k81J5BV1T+JCNACWqtTLxku3t/EL7SW0hkLis5S/u3DITe4a4rqHONtXan7
 E+zPWba4DuJys1xAbVq50fIltjduc/My3wo7NjumNswHubC7YSHHkl983m1AL9ABQu
 AUv4lKCTOrXkdw151A68MLj5ZrB1Rita0xwIt5oJrKLyRjPOANfvw1stfe1dYJ3Cxv
 btMR1aL9RVL5A==
Message-ID: <5300C998.7010508@gibfest.dk>
Date: Sun, 16 Feb 2014 15:22:16 +0100
From: Thomas Steen Rasmussen <thomas@gibfest.dk>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: freebsd-stable@freebsd.org
Subject: Re: Should I use jail?
References: <CAA_8tFq7JNw0=nqz5ByyfJs8cyEu+5z+sry=NESViegUSZBJ0Q@mail.gmail.com>
In-Reply-To: <CAA_8tFq7JNw0=nqz5ByyfJs8cyEu+5z+sry=NESViegUSZBJ0Q@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 16 Feb 2014 14:22:31 -0000

On 16-02-2014 09:58, 朱江 wrote:
> Hi,
>
> I want to run nginx and ghost <http://ghost.org>(a blogging platform),
> should I create a jail and put them into it?
>
> Thanks,

One word answer: Yes.
For what it's worth I never, ever run any service without running it in 
a jail.
I would highly recommend doing the same. It is awesome.


Best regards

Thomas Steen Rasmussen