Re: Idea about 'skeleton jail

2005-03-13 Thread Denis Shaposhnikov
> "Frank" == Frank Knobbe <[EMAIL PROTECTED]> writes: Frank> If you nullfs these directories, you loose the ability to Frank> prune the jail. Pruning is part of system hardening. I'd May be it's better to use unionfs, so anybody can replace binaries with their stub version pre jail. -- DS

Re: the current status of nullfs, unionfs

2005-03-10 Thread Denis Shaposhnikov
> "Kris" == Kris Kennaway <[EMAIL PROTECTED]> writes: Kris> nullfs seems to work fine, unionfs is very fragile and easily Kris> exploded. nullfs is absolutely useless for jail's because TOO slow. -- DSS5-RIPE DSS-RIPN 2:550/[EMAIL PROTECTED] 2:550/[EMAIL PROTECTED] mailto:[EMAIL PROTECTED

Re: the current status of nullfs, unionfs

2005-03-10 Thread Denis Shaposhnikov
> "Kris" == Kris Kennaway <[EMAIL PROTECTED]> writes: Kris> nullfs seems to work fine, unionfs is very fragile and easily Kris> exploded. nullfs is absolutely useless for jail's because TOO slow. -- DSS5-RIPE DSS-RIPN 2:550/[EMAIL PROTECTED] 2:550/[EMAIL PROTECTED] mailto:[EMAIL PROTECTED