Date: Thu, 9 Feb 2012 22:46:02 +0100 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Martin Matuska <mm@FreeBSD.org> Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org Subject: Re: svn commit: r231269 - head/sys/fs/nullfs Message-ID: <20120209214601.GA1313@garage.freebsd.pl> In-Reply-To: <201202091039.q19Ad2aM097022@svn.freebsd.org> References: <201202091039.q19Ad2aM097022@svn.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--pf9I7BMVVzbSWLtt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Feb 09, 2012 at 10:39:02AM +0000, Martin Matuska wrote: > Author: mm > Date: Thu Feb 9 10:39:01 2012 > New Revision: 231269 > URL: http://svn.freebsd.org/changeset/base/231269 >=20 > Log: > Allow mounting nullfs(5) inside jails. > =20 > This is now possible thanks to r230129. > =20 > MFC after: 1 month I'd really like to know that someone actually audited nullfs to see it can be safely managed within a jail. devfs is probably even more critical - hopefully it isn't possible to make simple administrative mistake that will allow to get access to, eg. /dev/kmem from within a jail or something similar. Changes like this one, which can have serious security implications, should be really properly reviewed. --=20 Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://tupytaj.pl --pf9I7BMVVzbSWLtt Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) iEYEARECAAYFAk80PpkACgkQForvXbEpPzRtUgCcDDpIn0FF81kIPQc2oc08OD0U aicAoLe+s1uqaITI8yhJXAXFM4ao5fGs =vS6O -----END PGP SIGNATURE----- --pf9I7BMVVzbSWLtt--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120209214601.GA1313>