From owner-freebsd-questions@FreeBSD.ORG Tue Jul 20 16:54:08 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7CB181065673 for ; Tue, 20 Jul 2010 16:54:08 +0000 (UTC) (envelope-from edflecko@gmail.com) Received: from mail-iw0-f182.google.com (mail-iw0-f182.google.com [209.85.214.182]) by mx1.freebsd.org (Postfix) with ESMTP id 486208FC1D for ; Tue, 20 Jul 2010 16:54:08 +0000 (UTC) Received: by iwn35 with SMTP id 35so7386033iwn.13 for ; Tue, 20 Jul 2010 09:54:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=Cz45gbElU4RtETMTeMYBbN8/YzOEYJ4ZA/s9Z8Y4knI=; b=iJ0NYTwr/h8peRd6XbiXFfUT7Yfzm+huO1on2wgDWytbneRb0SVv0v5JtV1mnuq5sw /pJ6N8dwQpaqDNRaRqXm034V4ATWvImXfALDvx6ARziFyGLZShxrpBlohYHyXwE5J79x JTZMSZzxrrjChKMfD9kYvQxRnGZcp8hhZFpSc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=aBajkUI2h7PNm72IBbVaUx2ILnjVD2t5KnBALDQP4ocZ12qLcrFgrHC8ctrFRcIXtU 68ThCHQE30nqWfWQq9HrsPM4P8rvBn+IZfFpgUaKBhMGo6m83dAabZ1yet42Y01dO65A R4OUNo3aukTBUJruSAydZVVYQ369Mn9cvFpjk= MIME-Version: 1.0 Received: by 10.231.39.195 with SMTP id h3mr7717137ibe.88.1279644847507; Tue, 20 Jul 2010 09:54:07 -0700 (PDT) Received: by 10.231.118.98 with HTTP; Tue, 20 Jul 2010 09:54:07 -0700 (PDT) Date: Tue, 20 Jul 2010 09:54:07 -0700 Message-ID: From: Ed Flecko To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: Recommend ezjail.conf settings? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Jul 2010 16:54:08 -0000 Hi folks, I'm looking at the ezjail.conf file, and it seems like SOME of the settings might be mandatory, but they're all commented out. For example, the: # ezjail_mount_enable="YES" # ezjail_devfs_enable="YES" # ezjail_devfs_ruleset="devfsrules_jail" # ezjail_procfs_enable="YES" # ezjail_fdescfs_enable="YES" should be uncommented because they're "Default options for newly created jails", right? Are there any of the other settings I might want to consider enabling? Thank you, Ed