os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Whitespace-only fixes, translators please ignore.

Browse source
This commit is contained in:
Warren Block 2016-02-20 18:08:19 +00:00
parent 9ef5601938
commit 1036791ae9
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=48225
1 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
en_US.ISO8859-1/books/handbook/jails/chapter.xml
View file

@ -31,17 +31,17 @@
performance, reliability, and security.</para>
<para>Jails build upon the &man.chroot.2; concept, which is used
to change the root directory of a set of processes. This creates a
safe environment, separate from the rest of the system.
Processes created in the chrooted environment can not access
files or resources outside of it. For that reason, compromising
a service running in a chrooted environment should not allow the
attacker to compromise the entire system. However, a chroot has
several limitations. It is suited to easy tasks which do not
require much flexibility or complex, advanced features. Over
time, many ways have been found to escape from a chrooted
environment, making it a less than ideal solution for securing
services.</para>
to change the root directory of a set of processes. This
creates a safe environment, separate from the rest of the
system. Processes created in the chrooted environment can not
access files or resources outside of it. For that reason,
compromising a service running in a chrooted environment should
not allow the attacker to compromise the entire system.
However, a chroot has several limitations. It is suited to easy
tasks which do not require much flexibility or complex, advanced
features. Over time, many ways have been found to escape from a
chrooted environment, making it a less than ideal solution for
securing services.</para>
<para>Jails improve on the concept of the traditional chroot
environment in several ways. In a traditional chroot