Re: jail & security

From: Alexey Zakirov (frank@agava.com)
Date: 08/23/01


Date: Thu, 23 Aug 2001 22:43:09 +0400 (MSD)
From: Alexey Zakirov <frank@agava.com>

On Thu, 23 Aug 2001, Alfred Perlstein wrote:

> > yourself from destroying a system (e.g. read only file system, setting the
> > system immutable flag, etc.)
> >
> > Remind me to never give you a shell account.
>
> Alexey is wrong in stating 'You CAN'T limit whole jail limits.' you
> actually can given the right patches to the jail subsystem. :)

Am I wrong? Can you setup jail that limits his CPU/MEM for particular
jail?

*** WBR, Alexey Zakirov (frank@agava.com)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Re: Reckless indifference by Greenpaeace
    ... >The French tried that particular trick and are still collecting shit for it. ... They did it inside someone elses territorial waters. ... Remind me which ... NZ jail the guy responsible eneded up in ... ...
    (sci.military.naval)
  • Re: [fbsd] Re: conf/102913: /etc/rc.d/named killall in jailed OS
    ... this mail about jailed namedis a good opportunity to remind about ... two PRs I have submitted to run a chrooted namedinside a jail: ... Jeremie Le Hen ...
    (freebsd-current)
  • Re: so what happens next?
    ... :Extend the peaceful respect of our Family to all those you meet on the ... :way to and from the gathering. ... remind them they WILL be arrested and booked into JAIL! ...
    (alt.gathering.rainbow)