From owner-svn-src-head@FreeBSD.ORG Sat Sep 7 08:01:14 2013 Return-Path: Delivered-To: svn-src-head@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 4BA4F3BD; Sat, 7 Sep 2013 08:01:14 +0000 (UTC) (envelope-from slw@zxy.spb.ru) Received: from zxy.spb.ru (zxy.spb.ru [195.70.199.98]) by mx1.freebsd.org (Postfix) with ESMTP id CD404219D; Sat, 7 Sep 2013 08:01:13 +0000 (UTC) Received: from slw by zxy.spb.ru with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1VIDUE-000P5K-Af; Sat, 07 Sep 2013 12:03:18 +0400 Date: Sat, 7 Sep 2013 12:03:18 +0400 From: Slawa Olhovchenkov To: Colin Percival Subject: Re: svn commit: r255316 - head/sys/kern Message-ID: <20130907080318.GA95723@zxy.spb.ru> References: <201309061732.r86HWTha054904@svn.freebsd.org> <20130906181826.GL4574@FreeBSD.org> <522A25FA.5060008@FreeBSD.org> <20130907070313.GO4574@FreeBSD.org> <522AD078.9010501@freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <522AD078.9010501@freebsd.org> User-Agent: Mutt/1.5.21 (2010-09-15) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: slw@zxy.spb.ru X-SA-Exim-Scanned: No (on zxy.spb.ru); SAEximRunCond expanded to false Cc: svn-src-head@FreeBSD.org, svn-src-all@FreeBSD.org, Gleb Smirnoff , src-committers@FreeBSD.org, Jamie Gritton X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Sep 2013 08:01:14 -0000 On Sat, Sep 07, 2013 at 12:06:32AM -0700, Colin Percival wrote: > On 09/07/13 00:03, Gleb Smirnoff wrote: > > Does that mean that we always have had ability for a jail-root to > > investigate kernel memory? > > Only if you're crazy enough to have a /dev/kmem inside your jail. Have we ability to export individual devices (from /dev/) to jail? For example, jail with named need /dev/ inside.