From owner-freebsd-current@FreeBSD.ORG Wed Sep 1 18:02:58 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C396816A4CE for ; Wed, 1 Sep 2004 18:02:58 +0000 (GMT) Received: from the-macgregors.org (82-33-59-105.cable.ubr06.stav.blueyonder.co.uk [82.33.59.105]) by mx1.FreeBSD.org (Postfix) with ESMTP id ADF4A43D2D for ; Wed, 1 Sep 2004 18:02:57 +0000 (GMT) (envelope-from freebsd.macgregor@blueyonder.co.uk) X-Urban-Legend: Mail headers contain urban legends Received: from fire (rob@fire.macgregor [192.168.32.100]) (authenticated bits=0) by the-macgregors.org (8.13.1/8.13.1) with ESMTP id i81I2uAR024741 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO) for ; Wed, 1 Sep 2004 18:02:56 GMT Message-Id: <200409011802.i81I2uAR024741@the-macgregors.org> From: "Rob MacGregor" To: Date: Wed, 1 Sep 2004 19:02:56 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 thread-index: AcSQTehcbhjM7cmYTheScA/Ynu0Klw== X-Virus-Scanned: by amavisd-milter (http://www.amavis.org/) Subject: 5.3-BETA1, jails and devfs X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Sep 2004 18:02:58 -0000 Probably a stupid question, however... I've got my first jail running under 5.3-BETA1 and am trying to lock down /dev, as per the advice in the jail man page. All attempts fail however: # devfs ruleset 10 devfs ruleset: ioctl DEVFSIO_SUSE: Operation not permitted # devfs rule apply hide devfs rule: ioctl DEVFSIO_RAPPLY: Operation not permitted I'm pretty sure I've missed something obvious in a man page, but having re-read them a few dozen times I'm darned if I can work it out. Any help appreciated. TIA -- Rob MacGregor (BOFH) [PGP key ID 0x1E51BF5A] If I cannot bend Heaven, I shall move Hell. -- Publius Vergilius Maro (Virgil).