From owner-freebsd-hackers Thu May 16 8:59: 7 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from scribble.fsn.hu (scribble.fsn.hu [193.224.40.95]) by hub.freebsd.org (Postfix) with SMTP id 2182437B478 for ; Thu, 16 May 2002 08:57:40 -0700 (PDT) Received: (qmail 29584 invoked by uid 1000); 16 May 2002 15:58:42 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 16 May 2002 15:58:42 -0000 Date: Thu, 16 May 2002 17:58:42 +0200 (CEST) From: Attila Nagy To: Peter Pentchev Cc: freebsd-hackers@FreeBSD.org Subject: Re: reboot your own jail ? In-Reply-To: <20020516184326.I349@straylight.oblivion.bg> Message-ID: References: <20020516003127.I17484-100000@utility.clubscholarship.com> <20020516144159.C349@straylight.oblivion.bg> <20020516162219.E45898@mail.webmonster.de> <20020516180414.H349@straylight.oblivion.bg> <20020516184326.I349@straylight.oblivion.bg> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello, > Yes, for your particular kind of jail :) And as a matter of fact, most > things could be started like that, indeed.. Seems I need to really wake > up and start thinking, and think myself away from the 'default' concept > of starting a full-fledged /bin/sh /etc/rc jail. Why would a /bin/sh needed for a nameserver? For helping crackers' life? :) I don't really like /bin/sh /etc/rc jails. And if I can, I often do jails on the 127/8 subnet with a simple redirect for that particular port. This also helps preventing the cracker to connect out from that jail. --------[ Free Software ISOs - ftp://ftp.fsn.hu/pub/CDROM-Images/ ]------- Attila Nagy e-mail: Attila.Nagy@fsn.hu Free Software Network (FSN.HU) phone @work: +361 210 1415 (194) cell.: +3630 306 6758 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message