On Mon, May 26, 2008 at 11:57:49AM +0000, Michael Reifenberger wrote:
> mr          2008-05-26 11:57:49 UTC
> 
>   FreeBSD src repository
> 
>   Modified files:
>     usr.sbin/jexec       jexec.8 jexec.c 
>   Log:
>   Extend jexec to accept hostname or ip-number besides jail-id.

As many already suggested using IP numbers and hostnames can be tricky
(and risky). What do you think about using jail name from /etc/rc.conf?
When a name is given, jexec could read /var/run/jail_<name>.id and use
jail ID from there?

I know it will only work with jails created by rc.d/jail, but I think
it's good enough.

PS. I'm not against this functionality, but we should be much more
    careful, especially with hostnames when
    security.jail.set_hostname_allowed=1.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
[EMAIL PROTECTED]                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

Attachment: pgpRYfWVS659D.pgp
Description: PGP signature

Reply via email to