From owner-cvs-src@FreeBSD.ORG  Wed Nov 19 19:47:50 2003
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id EAA8816A4CE; Wed, 19 Nov 2003 19:47:50 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 6F73B43FA3; Wed, 19 Nov 2003 19:47:50 -0800 (PST)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.9/8.12.9) with ESMTP id hAK3loXJ014228;
	Wed, 19 Nov 2003 19:47:50 -0800 (PST)
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.12.9/8.12.9/Submit) id hAK3looK014227;
	Wed, 19 Nov 2003 19:47:50 -0800 (PST)
	(envelope-from rwatson)
Message-Id: <200311200347.hAK3looK014227@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 19 Nov 2003 19:47:50 -0800 (PST)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/usr.sbin/jail jail.8
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Nov 2003 03:47:51 -0000

rwatson     2003/11/19 19:47:50 PST

  FreeBSD src repository

  Modified files:
    usr.sbin/jail        jail.8 
  Log:
  A variety of content cleanups:
  
  (1) Document the notion of using jail(8) to run "virtual servers" or
      just to constrain specific applications.  If only running specific
      applications, some configuration steps are unnecessary (such as
      editing rc.conf).
  
  (2) Add some more subsection headers to break up the bigger chunks of
      text.
  
  (3) Clarify the problems associated with applications binding all IP
      addresses in the host, and attempt to be more specific about
      potential application problems.  Document how to force sshd to
      bind the the right socket.
  
  (4) Suggest that in a jailed application scenario, you might want to
      have the host syslogd listen on the socket in the jail, rather
      than running syslogd in the jail.
  
  (5) Catch another reference to /stand/sysinstall.
  
  Approved by:    re (bmah implicitly)
  
  Revision  Changes    Path
  1.47      +71 -23    src/usr.sbin/jail/jail.8