From owner-freebsd-hackers Sun Mar 16 20:26:57 2003 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 22CA237B404 for ; Sun, 16 Mar 2003 20:26:56 -0800 (PST) Received: from mailhost.det3.ameritech.net (mailhost2-sfldmi.sfldmi.ameritech.net [206.141.193.106]) by mx1.FreeBSD.org (Postfix) with ESMTP id D4BB943F3F for ; Sun, 16 Mar 2003 20:26:52 -0800 (PST) (envelope-from dbailey27@ameritech.net) Received: from ameritech.net ([68.21.39.28]) by mailhost.det3.ameritech.net (InterMail vM.4.01.02.17 201-229-119) with ESMTP id <20030317042651.ENCJ176.mailhost.det3.ameritech.net@ameritech.net>; Sun, 16 Mar 2003 23:26:51 -0500 Message-ID: <3E754E4A.8070104@ameritech.net> Date: Sun, 16 Mar 2003 23:25:46 -0500 From: northern snowfall User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:0.9.4.1) Gecko/20020518 Netscape6/6.2.3 X-Accept-Language: en-us MIME-Version: 1.0 To: Jared Mauch Cc: Mooneer Salem , freebsd-hackers@FreeBSD.ORG Subject: Re: jail support for ping, traceroute, etc.. crude hack References: <20030316211400.GE32478@puck.nether.net> <20030317005641.GA8288@puck.nether.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Jail is irrelevant if an attacker can access the kernel. It sounds like you're looking for a secure solution that UNIX doesn't even have the capability to implement. The real solution in a BSD environment would be too elaborate for my taste. It would make more sense to me to move away from UNIX ;) D To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message