Re: Should jail treat ip-number?

[Poul-Henning Kamp]

In message <[EMAIL PROTECTED]>, Jamie Bowden
 writes:
>
>-security stripped
>
>On Tue, 9 Nov 1999, Poul-Henning Kamp wrote:
>
>:In message <[EMAIL PROTECTED]>, Yoshinobu Inoue writes:
>
>:>(2)What is the goal of the restriction?
>
>:To isolate people in the jail from the "real" machine and from
>:other jails.
>
>What does jail do that chroot doesn't?  I've seen several discussions on
>jail on -hackers, but no explanation of why it was implemented, or how
>it's different from chroot.

1. All tcp/ip forced to use a particular IP#.  This allows you to have
   several inetd/sendmail/apache running, one per jail.

2. Many things which root can normally do cannot be done if root is jailed.

--
Poul-Henning Kamp             FreeBSD coreteam member
[EMAIL PROTECTED]               "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message