From owner-freebsd-hackers Wed Nov 13 12: 1:12 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1108037B401 for ; Wed, 13 Nov 2002 12:01:11 -0800 (PST) Received: from apollo.backplane.com (apollo.backplane.com [216.240.41.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id A80F543E3B for ; Wed, 13 Nov 2002 12:01:10 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: from apollo.backplane.com (localhost [127.0.0.1]) by apollo.backplane.com (8.12.5/8.12.5) with ESMTP id gADK18FC001695; Wed, 13 Nov 2002 12:01:08 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.12.5/8.12.5/Submit) id gADK188f001694; Wed, 13 Nov 2002 12:01:08 -0800 (PST) (envelope-from dillon) Date: Wed, 13 Nov 2002 12:01:08 -0800 (PST) From: Matthew Dillon Message-Id: <200211132001.gADK188f001694@apollo.backplane.com> To: Poul-Henning Kamp Cc: hackers@FreeBSD.ORG Subject: Re: tty/pty devices not safe in jail? References: <98485.1037216817@critter.freebsd.dk> Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Would people be interested if I added such a feature? Limit the highest allocatable pty to 90% when operating within a jail? e.g. if you have 256 ptys both jail and normal tend to allocate ptys from the bottom up, but the jail would not be allowed to allocate past pty #227. This way if a jail eats all the ptys the sysadmin can still ssh in. -Matt Matthew Dillon :> exhaust all available ptys? : :No. : :-- :Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 :phk@FreeBSD.ORG | TCP/IP since RFC 956 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message