From owner-freebsd-doc Sun Feb 9 13:40: 5 2003 Delivered-To: freebsd-doc@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 74B4A37B401 for ; Sun, 9 Feb 2003 13:40:04 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1D50543F85 for ; Sun, 9 Feb 2003 13:40:04 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id h19Le3NS034749 for ; Sun, 9 Feb 2003 13:40:03 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.6/8.12.6/Submit) id h19Le3PK034748; Sun, 9 Feb 2003 13:40:03 -0800 (PST) Date: Sun, 9 Feb 2003 13:40:03 -0800 (PST) Message-Id: <200302092140.h19Le3PK034748@freefall.freebsd.org> To: freebsd-doc@FreeBSD.org Cc: From: Giorgos Keramidas Subject: Re: docs/48095: Manual page for jail(8) does not mention mounting devfs under jail. Reply-To: Giorgos Keramidas Sender: owner-freebsd-doc@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following reply was made to PR docs/48095; it has been noted by GNATS. From: Giorgos Keramidas To: bug-followup@freebsd.org Cc: Grzegorz Czaplinski Subject: Re: docs/48095: Manual page for jail(8) does not mention mounting devfs under jail. Date: Sun, 9 Feb 2003 23:36:26 +0200 On 2003-02-09 22:27, Grzegorz Czaplinski wrote: > On Sun, Feb 09, 2003 at 07:55:39PM +0200, Giorgos Keramidas wrote: > > # Jailed processes that need devices should have some sort of access > > # to /dev nodes when they are inside the jail, imho. It is then up to > > # the administrator to choose how to implement this. Either by > > # mounting devfs under the /jail/dev directory or by manually calling > > # MAKEDEV or mknod to create only those devices that are absolutely > > # necessary. > > I would put it that way: > # Jailed processes that need devices should have some sort of access > # to /dev nodes when they are inside the jail. Making device nodes with > # MAKEDEV or mknod is not sufficient. To let devfs(5) allocate device > # nodes in your jail transparently do: > mount -t devfs devfs /jail/dev Hmm, odd. Isn't mknod sufficient? I have problems building world right now in my current machine at home, so I can't test this by creating a new jail, but how/why did mknod within the jail fail to work for you? - Giorgos To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-doc" in the body of the message