Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 May 2020 20:07:20 +0200
From:      "Julian H. Stacey" <jhs@berklix.com>
To:        "Poul-Henning Kamp" <phk@phk.freebsd.dk>
Cc:        "freebsd-arch@freebsd.org" <freebsd-arch@freebsd.org>, "freebsd-hackers@freebsd.org" <hackers@freebsd.org>, Kyle Evans <kevans@freebsd.org>, Alan Somers <asomers@freebsd.org>, Arne Steinkamm <freebsd-arch@Steinkamm.COM>
Subject:   Re: [HEADSUP] Disallowing read() of a directory fd
Message-ID:  <202005151807.04FI7K8q045648@fire.js.berklix.net>
In-Reply-To: Your message "Fri, 15 May 2020 16:11:24 -0000." <44546.1589559084@critter.freebsd.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
"Poul-Henning Kamp" wrote:
> --------
> In message <202005151504.04FF423p040952@fire.js.berklix.net>, "Julian H. Stacey
> " writes:
> 
> >No. Root is Root regardless if in a jail or not.
> 
> No.

Thanks, Accepting you mean: power of a root login within a jail is less.

Yes I knew that, but I guess mine above was ambiguous, & more so
without text restored below. I meant root the person, who has to
login & fix various hosts, regardless if they are jails or not.
It's already harder to work in jails; further limitation unwelcome.

> > A root admin of
> > a server in a jail needs full power without waiting days to contact
> > other root human who owns the prison, without wasting human time
> > of jail owner & prison owner formulating email request & considering
> > & enabling requirement.

> See also:  https://papers.freebsd.org/2000/phk-jails/ 

Will do, thanks.

Cheers
--
Julian Stacey, Consultant Systems Engineer, BSD Linux http://berklix.com/jhs/
http://www.berklix.org/corona/#masks  Tie 2 handkerchiefs or 1 pillow case. 
Jobs & economy hit by Corona to be hit again by Crash Brexit 31st Dec. 2020



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202005151807.04FI7K8q045648>