From owner-freebsd-questions  Thu Oct 18  0:47:31 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from dark4ce.com (dark4ce.com [194.109.74.197])
	by hub.freebsd.org (Postfix) with ESMTP id 30A3137B401
	for <freebsd-questions@freebsd.org>; Thu, 18 Oct 2001 00:47:28 -0700 (PDT)
Received: (from freebsd@localhost)
	by dark4ce.com (8.11.6/8.11.6) id f9I7lQ911304
	for freebsd-questions@freebsd.org; Thu, 18 Oct 2001 09:47:26 +0200 (CEST)
	(envelope-from freebsd)
Date: Thu, 18 Oct 2001 09:47:26 +0200
From: Hanno Liem <freebsd@dark4ce.com>
To: freebsd-questions@freebsd.org
Subject: To jail or not to jail, that is the question
Message-ID: <20011018094726.E85163@dark4ce.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I was wondering if it is wise to use jails for running seperate functions
in: one running the MTA, one for apache, etc. It seems like added security.

On the other hand I wonder if it complicates the system administration of
the box... furthermore I just read an article on Daemonnews about security
vulnerabilities in jail (albeit they do not seem that easy to exploit).

Is anyone here using jails a lot? Care to share your wisdom?

all the best,

Han

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message