From owner-freebsd-questions@FreeBSD.ORG Sat Jan 30 22:27:25 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E9986106566B for ; Sat, 30 Jan 2010 22:27:25 +0000 (UTC) (envelope-from jhall@socket.net) Received: from mf1.socket.net (mf1e.socket.net [216.106.88.69]) by mx1.freebsd.org (Postfix) with ESMTP id C89AE8FC08 for ; Sat, 30 Jan 2010 22:27:25 +0000 (UTC) Received: from [10.129.40.201] (216.106.12.14.reverse.socket.net [216.106.12.14]) by mf1.socket.net (Postfix) with ESMTP id 74D6363B3C for ; Sat, 30 Jan 2010 16:27:24 -0600 (CST) Message-Id: From: Jay Hall To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Sat, 30 Jan 2010 16:27:23 -0600 X-Mailer: Apple Mail (2.936) Subject: Jails and Hardware security X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Jan 2010 22:27:26 -0000 Is it possible to limit what hardware a jail has access to? I am wanting to limit access to the tape drive/autoloader in one jail, but allow another to have access to it. Is this as simple as deleting the appropriate entries in /dev? Thanks, Jay