Whitespace-only fixes, translators please ignore.

This commit is contained in:
Warren Block 2016-02-20 18:08:19 +00:00
parent 9ef5601938
commit 1036791ae9
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=48225

View file

@ -31,17 +31,17 @@
performance, reliability, and security.</para> performance, reliability, and security.</para>
<para>Jails build upon the &man.chroot.2; concept, which is used <para>Jails build upon the &man.chroot.2; concept, which is used
to change the root directory of a set of processes. This creates a to change the root directory of a set of processes. This
safe environment, separate from the rest of the system. creates a safe environment, separate from the rest of the
Processes created in the chrooted environment can not access system. Processes created in the chrooted environment can not
files or resources outside of it. For that reason, compromising access files or resources outside of it. For that reason,
a service running in a chrooted environment should not allow the compromising a service running in a chrooted environment should
attacker to compromise the entire system. However, a chroot has not allow the attacker to compromise the entire system.
several limitations. It is suited to easy tasks which do not However, a chroot has several limitations. It is suited to easy
require much flexibility or complex, advanced features. Over tasks which do not require much flexibility or complex, advanced
time, many ways have been found to escape from a chrooted features. Over time, many ways have been found to escape from a
environment, making it a less than ideal solution for securing chrooted environment, making it a less than ideal solution for
services.</para> securing services.</para>
<para>Jails improve on the concept of the traditional chroot <para>Jails improve on the concept of the traditional chroot
environment in several ways. In a traditional chroot environment in several ways. In a traditional chroot