os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Update for FreeBSD-SA-07:01.jail.

Browse source 
PR:		docs/117024
Patch by:	Wesley Shields <wxs.atarininja.org> (partly)
This commit is contained in:
Daniel Gerzo 2007-10-13 23:04:11 +00:00
parent 25fff62100
commit 81feacb460
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=30896
1 changed files with 22 additions and 3 deletions

25
en_US.ISO8859-1/books/handbook/jails/chapter.sgml
View file

@ -775,16 +775,35 @@ jail_set_hostname_allow="NO"
jail_list="ns mail www"
jail_ns_hostname="ns.example.org"
jail_ns_ip="192.168.3.17"
jail_ns_rootdir="/home/j/ns"
jail_ns_rootdir="/usr/home/j/ns"
jail_ns_devfs_enable="YES"
jail_mail_hostname="mail.example.org"
jail_mail_ip="192.168.3.18"
jail_mail_rootdir="/home/j/mail"
jail_mail_rootdir="/usr/home/j/mail"
jail_mail_devfs_enable="YES"
jail_www_hostname="www.example.org"
jail_www_ip="62.123.43.14"
jail_www_rootdir="/home/j/www"
jail_www_rootdir="/usr/home/j/www"
jail_www_devfs_enable="YES"</programlisting>
<warning>
<para>The reason why the
<varname>jail_<replaceable>name</replaceable>_rootdir</varname>
variable is set to <filename
role="directory">/usr/home</filename> instead of
<filename role="directory">/home</filename> is that the
physical path of the <filename
role="directory">/home</filename> directory on a
default &os; installation is <filename
role="directory">/usr/home</filename>. The
<varname>jail_<replaceable>name</replaceable>_rootdir</varname>
variable must <emphasis>not</emphasis> be set to a path
which includes a symbolic link, otherwise the jails will
refuse to start. Use the &man.realpath.1; utility to
determine a value which should be set to this variable.
Please see the &os;-SA-07:01.jail Security Advisory for
more information.</para>
</warning>
</step>
<step>
<para>Create the required mount points for the read-only