From owner-freebsd-security@FreeBSD.ORG Sun Aug 31 20:46:32 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 42A9E106568B for ; Sun, 31 Aug 2008 20:46:32 +0000 (UTC) (envelope-from ohauer@gmx.de) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.freebsd.org (Postfix) with SMTP id 849348FC19 for ; Sun, 31 Aug 2008 20:46:31 +0000 (UTC) (envelope-from ohauer@gmx.de) Received: (qmail 15385 invoked by uid 0); 31 Aug 2008 20:19:49 -0000 Received: from 194.231.39.124 by www115.gmx.net with HTTP; Sun, 31 Aug 2008 22:19:49 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 31 Aug 2008 22:19:49 +0200 From: "Olli Hauer" In-Reply-To: <20080831111208.P17652@wojtek.tensor.gdynia.pl> Message-ID: <20080831201949.96800@gmx.net> MIME-Version: 1.0 References: <235b80000808301408v49e91675se91a257e257537fc@mail.gmail.com> <20080831111208.P17652@wojtek.tensor.gdynia.pl> To: Wojciech Puchar , tethys.ocean@gmail.com X-Authenticated: #1956535 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX1/CZJ5syCHCYGldKK30vTfWwPipo4NgFvJ8pPv1iB mcVD0ddpFr6C6sY40ktP1YbhLza7F0eSc1Bw== Content-Transfer-Encoding: 8bit X-GMX-UID: 08mIcOcWPjl+K4LuKzU2gk47MTE2NUne Cc: freebsd-security@freebsd.org, freebsd-questions@freebsd.org Subject: Re: jail stop extracting iso file X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Aug 2008 20:46:32 -0000 > In server jail and squid is running on it as lots of another packet. i > want > to extract iso image in this server. But i havent do it. > > #mdconfig -a -t vnode -f big_bcbcv.iso > #mdconfig: open(/dev/mdctl): No such file or directory > > you can't > > jail doesn't allow it. Yes, but why don't mount the ISO at the host system and do a nullfs mount into the jail? at the host system (not in the jail) # mdconfig -a -t vnode -u 10 -f ${path_to_iso_image} # mount_cd9660 -o ro /dev/md10 /mnt/ # mount_nullfs /mnt ${path_to_jail}/mnt ssh into the jail # pkg_add /mnt/filename -- GMX Kostenlose Spiele: Einfach online spielen und Spaß haben mit Pastry Passion! http://games.entertainment.gmx.net/de/entertainment/games/free/puzzle/6169196