Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 04 Nov 2001 20:14:28 +0100
From:      Poul-Henning Kamp <phk@critter.freebsd.dk>
To:        Francisco Reyes <lists@natserv.com>
Cc:        FreeBSD Security List <freebsd-security@FreeBSD.ORG>
Subject:   Re: Chroot or jail? 
Message-ID:  <21611.1004901268@critter.freebsd.dk>
In-Reply-To: Your message of "Sun, 04 Nov 2001 14:10:43 EST." <20011104140305.C18599-100000@zoraida.natserv.net> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <20011104140305.C18599-100000@zoraida.natserv.net>, Francisco Reyes 
writes:
>I am trying to see which method would be best for the following. I have an
>ID I use to copy data from one machine to another using SSH. I created
>some passwordless keys for the ID so the synchronization program, unison, could run
>unatended.
>
>As an additional precaution I wanted to isolate what the ID could see. I
>was unable to understand the chroot man page and the jail page will take
>me some time to read so I am going to print it and read it carefully.

Both chroot and jail must be run as root.  Chroot doesn't hide
anything only jail does.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?21611.1004901268>