From owner-cvs-all@FreeBSD.ORG  Thu Jun 26 14:20:25 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id A66E537B401; Thu, 26 Jun 2003 14:20:25 -0700 (PDT)
Received: from fledge.watson.org (fledge.watson.org [204.156.12.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id AA6EB43FBD; Thu, 26 Jun 2003 14:20:24 -0700 (PDT)
	(envelope-from robert@fledge.watson.org)
Received: from fledge.watson.org (localhost [127.0.0.1])
	by fledge.watson.org (8.12.9/8.12.9) with ESMTP id h5QLJxKJ067141;
	Thu, 26 Jun 2003 17:19:59 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Received: from localhost (robert@localhost)h5QLJxtS067138;
	Thu, 26 Jun 2003 17:19:59 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Date: Thu, 26 Jun 2003 17:19:59 -0400 (EDT)
From: Robert Watson <rwatson@freebsd.org>
X-Sender: robert@fledge.watson.org
To: Mike Makonnen <mtm@identd.net>
In-Reply-To: <20030626204157.GTV246.out004.verizon.net@kokeb.ambesa.net>
Message-ID: <Pine.NEB.3.96L.1030626171934.67134A-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: cvs-src@freebsd.org
cc: src-committers@freebsd.org
cc: cvs-all@freebsd.org
Subject: Re: cvs commit: src/usr.sbin/jail jail.8
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jun 2003 21:20:26 -0000


On Thu, 26 Jun 2003, Mike Makonnen wrote:

> >   When pointing users at mount_devfs to populate the /dev of a jail,
> >   tell them that they also need to use devfs rules to prevent
> >   inappropriate devices from appearing in the jail; add an Xref.  In
> >   earlier versions of this man page, the user was instructed to use
> >   sh MAKEDEV jail, which only created a minimal set of device nodes.
> 
> Just an FYI, I'm working on an rc.subr(8) routine (part of an extention
> to rc.d/jail I'm working on) that will mount and minimally populate a
> devfs partition. Users can then rely on a "standard" and safe way of
> doing this kind of thing. 

Ah, wonderful!  That is indeed just what we need.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Network Associates Laboratories