From owner-freebsd-questions@FreeBSD.ORG Tue Jul 20 18:39:46 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A3F0A106567F for ; Tue, 20 Jul 2010 18:39:46 +0000 (UTC) (envelope-from aiza21@comclark.com) Received: from mail-03.name-services.com (mail-03.name-services.com [69.64.155.195]) by mx1.freebsd.org (Postfix) with ESMTP id 8C10F8FC0A for ; Tue, 20 Jul 2010 18:39:46 +0000 (UTC) Received: from [10.0.10.3] ([202.69.172.68]) by mail-03.name-services.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 20 Jul 2010 11:39:37 -0700 Message-ID: <4C45ED62.6000709@comclark.com> Date: Wed, 21 Jul 2010 02:39:30 +0800 From: Aiza User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: Ed Flecko References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 20 Jul 2010 18:39:37.0833 (UTC) FILETIME=[E827D590:01CB283A] X-Sender: fbsd8@a1poweruser.com Cc: freebsd-questions@freebsd.org Subject: Re: Recommend ezjail.conf settings? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Jul 2010 18:39:46 -0000 Ed Flecko wrote: > Hi folks, > I'm looking at the ezjail.conf file, and it seems like SOME of the > settings might be mandatory, but they're all commented out. > > For example, the: > > # ezjail_mount_enable="YES" > # ezjail_devfs_enable="YES" > # ezjail_devfs_ruleset="devfsrules_jail" > # ezjail_procfs_enable="YES" > # ezjail_fdescfs_enable="YES" > > should be uncommented because they're "Default options for newly > created jails", right? > > Are there any of the other settings I might want to consider enabling? > > Thank you, > Ed Of course their commented out. Those are the default settings hard coded in the ezjail-admin script. You have no need to ever change those. Leave the conf file alone. Messing with it will only cause you problems. And I suggest you leave that dinosaur ezjail to it death and move on to its replacement, qjail. Which is a complete rewrite of ezjail, fixing all of its long time bugs and adding many new features.