From owner-cvs-all@FreeBSD.ORG Wed Nov 19 19:47:50 2003 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EAA8816A4CE; Wed, 19 Nov 2003 19:47:50 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6F73B43FA3; Wed, 19 Nov 2003 19:47:50 -0800 (PST) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.9/8.12.9) with ESMTP id hAK3loXJ014228; Wed, 19 Nov 2003 19:47:50 -0800 (PST) (envelope-from rwatson@repoman.freebsd.org) Received: (from rwatson@localhost) by repoman.freebsd.org (8.12.9/8.12.9/Submit) id hAK3looK014227; Wed, 19 Nov 2003 19:47:50 -0800 (PST) (envelope-from rwatson) Message-Id: <200311200347.hAK3looK014227@repoman.freebsd.org> From: Robert Watson Date: Wed, 19 Nov 2003 19:47:50 -0800 (PST) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/usr.sbin/jail jail.8 X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Nov 2003 03:47:51 -0000 rwatson 2003/11/19 19:47:50 PST FreeBSD src repository Modified files: usr.sbin/jail jail.8 Log: A variety of content cleanups: (1) Document the notion of using jail(8) to run "virtual servers" or just to constrain specific applications. If only running specific applications, some configuration steps are unnecessary (such as editing rc.conf). (2) Add some more subsection headers to break up the bigger chunks of text. (3) Clarify the problems associated with applications binding all IP addresses in the host, and attempt to be more specific about potential application problems. Document how to force sshd to bind the the right socket. (4) Suggest that in a jailed application scenario, you might want to have the host syslogd listen on the socket in the jail, rather than running syslogd in the jail. (5) Catch another reference to /stand/sysinstall. Approved by: re (bmah implicitly) Revision Changes Path 1.47 +71 -23 src/usr.sbin/jail/jail.8