From owner-freebsd-current@FreeBSD.ORG  Sun Jul 22 00:19:15 2007
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 611AF16A419
	for <freebsd-current@FreeBSD.org>; Sun, 22 Jul 2007 00:19:15 +0000 (UTC)
	(envelope-from bsam@ipt.ru)
Received: from mail.ipt.ru (mail.ipt.ru [194.62.233.102])
	by mx1.freebsd.org (Postfix) with ESMTP id 1806C13C442
	for <freebsd-current@FreeBSD.org>; Sun, 22 Jul 2007 00:19:15 +0000 (UTC)
	(envelope-from bsam@ipt.ru)
Received: from doc.sem.ipt.ru ([192.168.12.1] helo=ipt.ru)
	by mail.ipt.ru with esmtp (Exim 4.62 (FreeBSD))
	(envelope-from <bsam@ipt.ru>) id 1ICP8z-000A1c-7j
	for freebsd-current@FreeBSD.org; Sun, 22 Jul 2007 04:19:15 +0400
Received: from bsam by ipt.ru with local (Exim 4.63 (FreeBSD))
	(envelope-from <bsam@ipt.ru>) id 1ICP9C-00040f-4E
	for freebsd-current@FreeBSD.org; Sun, 22 Jul 2007 04:18:06 +0400
To: freebsd-current@FreeBSD.org
From: Boris Samorodov <bsam@ipt.ru>
Date: Sun, 22 Jul 2007 04:18:06 +0400
Message-ID: <97732929@srv.sem.ipt.ru>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.99 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: 
Subject: mount_nullfs inside a jail
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 22 Jul 2007 00:19:15 -0000

Hi!


Is it possible to use mount_nullfs inside a jail?

With amd64-current:
-----
# sysctl security.jail
security.jail.jailed: 1
security.jail.mount_allowed: 1
security.jail.chflags_allowed: 1
security.jail.allow_raw_sockets: 0
security.jail.enforce_statfs: 2
security.jail.sysvipc_allowed: 1
security.jail.socket_unixiproute_only: 1
security.jail.set_hostname_allowed: 1
# mount_nullfs /usr/ports /mnt
mount_nullfs: Operation not permitted
-----

Thanks!


WBR
-- 
Boris Samorodov (bsam)
Research Engineer, http://www.ipt.ru Telephone & Internet SP
FreeBSD committer, http://www.FreeBSD.org The Power To Serve