Date: Wed, 28 May 2008 22:51:06 +0200 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Michael Reifenberger <mr@FreeBSD.org> Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/usr.sbin/jexec jexec.8 jexec.c Message-ID: <20080528205106.GB2865@garage.freebsd.pl> In-Reply-To: <200805261157.m4QBvnpF025029@repoman.freebsd.org> References: <200805261157.m4QBvnpF025029@repoman.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On Mon, May 26, 2008 at 11:57:49AM +0000, Michael Reifenberger wrote:
> mr 2008-05-26 11:57:49 UTC
>
> FreeBSD src repository
>
> Modified files:
> usr.sbin/jexec jexec.8 jexec.c
> Log:
> Extend jexec to accept hostname or ip-number besides jail-id.
As many already suggested using IP numbers and hostnames can be tricky
(and risky). What do you think about using jail name from /etc/rc.conf?
When a name is given, jexec could read /var/run/jail_<name>.id and use
jail ID from there?
I know it will only work with jails created by rc.d/jail, but I think
it's good enough.
PS. I'm not against this functionality, but we should be much more
careful, especially with hostnames when
security.jail.set_hostname_allowed=1.
--
Pawel Jakub Dawidek http://www.wheel.pl
pjd@FreeBSD.org http://www.FreeBSD.org
FreeBSD committer Am I Evil? Yes, I Am!
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
iD8DBQFIPcW5ForvXbEpPzQRAq+dAJ4pmNepibb1Cgp4j7BcB09IZeFinQCg5eDk
YnvvJCPX5lLydU/gnSVx4RI=
=bleA
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080528205106.GB2865>