Date: Thu, 08 Oct 2009 10:49:10 +0400 From: Andrey Groshev <greenx@yartv.ru> To: Menshikov Konstantin <kostjn@peterhost.ru> Cc: freebsd-jail@freebsd.org Subject: Re: how to make the jail safe for the parent system? Message-ID: <4ACD8B66.5080508@yartv.ru> In-Reply-To: <4ACCAAB7.8010507@peterhost.ru> References: <4ACC6ABE.9050107@yartv.ru> <4ACCAAB7.8010507@peterhost.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
About "&" I thought, where it to attach.:)
Yes - so works correctly.
This bug lies on a surface, PR too I can not find.
How you think, can be to write it?
Menshikov Konstantin пишет:
> Andrey Groshev wrote:
>> Hi, All!
>>
>> I understand, what not absolutely normal question, but...
>>
>> There is I and my server.
>> Also there is other person a server responsible for a web.
>> Periodically he wants that I would instal some software, but in my
>> representation, this software bad or unnecessary.
>> I wish to make jail for its and its software.
>> To give to this person complete access to it, let does all that wants.
>> But, if in the jail create wrong start scripts, then the parent
>> system too cannot be started up to the end.
>> For example: in jail in /etc/rc.local write /bin/sh
>> And that starts all after this prison will not receive handle.
>>
>> Question: how it to avoid?
>>
>>
> Hi.
> I`m think, that this is bug in /etc/rc.d/jail script.
> You can fix /etc/rc.d/jail
> 626 run_rc_command "${cmd}" &
> 627 sleep 5
> instead
> 626 run_rc_command "${cmd}"
> This work.
>
>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ACD8B66.5080508>