Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 Jul 2011 22:49:28 +0200
From:      Martin Matuska <mm@FreeBSD.org>
To:        Alexander Leidinger <Alexander@Leidinger.net>
Cc:        freebsd-current@FreeBSD.org
Subject:   Re: [PATCH] updated /etc/rc.d/jail and added ZFS support
Message-ID:  <4E35BFD8.6010603@FreeBSD.org>
In-Reply-To: <20110730172945.00001576@unknown>
References:  <4E316E19.9040309@FreeBSD.org> <20110730172945.00001576@unknown>

next in thread | previous in thread | raw e-mail | index | archive | help
Dňa 30. 7. 2011 17:29, Alexander Leidinger wrote / napísal(a):
> On Thu, 28 Jul 2011 16:11:37 +0200 Martin Matuska <mm@FreeBSD.org>
> wrote:
>
>
>> The attached patch allows better fine-tuning of jails started via
>> /etc/rc.d, uses the new jail(8) flags (-c -m), the persist parameter
>> and adds ZFS support.
>> Patch is fully backward compatible.
>>
>> Please review, comment and/or test my attached patch.
> Can you please have a look at the jail part of
> http://www.leidinger.net/FreeBSD/current-patches/etc:rc.d.diff and take
> some parts which you didn't take care about
> (jailname/securelevel/correctness check for fstab entries)?
>
> Bye,
> Alexander.
>
I have added the check for fstab entries to my patch. The
jailname/securelevel part is questionable. As to discussion with Jamie
Gritton (jamie@) we should go the jail_example_params way for as many
parameters as possible so we don't unnecessarily pollute rc.conf. This
is not possible for persist because it has to be set to 1 on creation
time for ZFS support.

This way a user can set something like:
jail_example_params="name=test securelevel=1 enforce_statfs=1 allow.mount=1"

Patch available at:
http://people.freebsd.org/~mm/patches/jail/jail_etc.patch

-- 
Martin Matuska
FreeBSD committer
http://blog.vx.sk




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4E35BFD8.6010603>