From owner-freebsd-questions@FreeBSD.ORG Thu Oct 9 20:31:53 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B564516A4B3 for ; Thu, 9 Oct 2003 20:31:53 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-64-169-107-253.dsl.lsan03.pacbell.net [64.169.107.253]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3CE6C43FAF for ; Thu, 9 Oct 2003 20:31:52 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5]) by obsecurity.dyndns.org (Postfix) with ESMTP id 146A866D97; Thu, 9 Oct 2003 20:31:44 -0700 (PDT) Received: by rot13.obsecurity.org (Postfix, from userid 1000) id 07E04B87; Thu, 9 Oct 2003 20:31:44 -0700 (PDT) Date: Thu, 9 Oct 2003 20:31:43 -0700 From: Kris Kennaway To: "Marc G. Fournier" Message-ID: <20031010033143.GA11384@rot13.obsecurity.org> References: <20030803200948.GA10712@lewiz.org> <200310091700.09658.kennyf@pchg.net> <20031009211629.T28590@ganymede.hub.org> <20031009212824.Q28590@ganymede.hub.org> <20031010005515.GH587@lewiz.org> <20031009221555.W28590@ganymede.hub.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="pf9I7BMVVzbSWLtt" Content-Disposition: inline In-Reply-To: <20031009221555.W28590@ganymede.hub.org> User-Agent: Mutt/1.4.1i cc: FreeBSD-questions cc: Lewis Thompson cc: Kenny Freeman Subject: Re: Jail FS questions. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Oct 2003 03:31:53 -0000 --pf9I7BMVVzbSWLtt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Oct 09, 2003 at 10:19:46PM -0300, Marc G. Fournier wrote: > > If I use unionfs as the ``base'' for the jail then every directory seems > > to be automagically owned by the person that mounted it (i.e. root). > > This causes me problems for stuff like mailspool, etc. I think this is > > the way unionfs works though, not an issue I am personally having. >=20 > Ah, neat ... I'd never noticed that before ... its never affected anything > as far as I've experienced though, but we don't unionfs mount /var, as > there is a bug in unionfs dealing with sockets that mounting /var causing > the server to crash repeatedly ... See..that's just what I'm talking about. Software that "works fine as long as you remember not to do X, Y or Z, which will crash the system" is what is called "not production quality". Advocating that users (which are not the same as testers, or developers) use it anyway on their production systems is irresponsible. Kris --pf9I7BMVVzbSWLtt Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQE/higfWry0BWjoQKURAjWEAJ0e/ceDr4iYAWyoABBNv3ucXk0kngCfeDvs h6V1Gb5WjSO1WNPAqS7YMwc= =u/7z -----END PGP SIGNATURE----- --pf9I7BMVVzbSWLtt--