From owner-freebsd-questions@FreeBSD.ORG Wed Apr 7 07:10:17 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 35C7B106566B for ; Wed, 7 Apr 2010 07:10:17 +0000 (UTC) (envelope-from aiza21@comclark.com) Received: from avmxsmtp1.comclark.com (avmxsmtp1.comclark.com [202.69.191.115]) by mx1.freebsd.org (Postfix) with ESMTP id BF9648FC14 for ; Wed, 7 Apr 2010 07:10:16 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AnkWAKbMu0vKRa7iPGdsb2JhbAAHh12TYwEBAQE1uhWFCQSDIg X-IronPort-AV: E=Sophos;i="4.51,377,1267372800"; d="scan'208";a="12992082" Received: from unknown (HELO [10.0.10.3]) ([202.69.174.226]) by avmxsmtp5.comclark.com with ESMTP; 07 Apr 2010 15:10:13 +0800 Message-ID: <4BBC2FD0.3040204@comclark.com> Date: Wed, 07 Apr 2010 15:10:08 +0800 From: Aiza User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: Dan Naumov References: <20100406213711.GA38637@orion.hsd1.pa.comcast.net> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Mars G Miro , freebsd-jail@freebsd.org, Glen Barber , freebsd-questions@freebsd.org Subject: Re: bizarre mount_nullfs issue with jails / ezjail X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Apr 2010 07:10:17 -0000 Dan Naumov wrote: >>> An additional question: how come "sade" and "sysinstall" which are run >>> inside the jail can see (and I can only assume they can also operate >>> on and damage) the real underlying disks of the host? >>> >> Disks (as well as others you have in your host's /dev) aren't visible >> inside jails. > > Well, somehow they are on my system. > > I guess I should've also clarified that the jail was installed using > ezjail and not completely manually > >>From /usr/local/etc/ezjail/semipublic > > export jail_semipublic_devfs_enable="YES" > export jail_semipublic_devfs_ruleset="devfsrules_jail" > > - Sincerely, > Dan Naumov > > You are not in a jail but as the host. Use ezjail-admin console jailname and things will look alot different. What you are playing with are ezjails system control files.