Re: Hierachical jails devfs and rc.conf

2011-03-28 Thread Holger Hans Peter Freyther
On 03/28/2011 07:06 PM, Adam Vande More wrote: > On Mon, Mar 28, 2011 at 10:14 AM, Holger Freyther > wrote: > > So really quick question. Is there a way to statically populate the dev > tree > with the minimum of needed descriptors? A first try with mknod > /j

Re: Hierachical jails devfs and rc.conf

2011-03-28 Thread Adam Vande More
On Mon, Mar 28, 2011 at 10:14 AM, Holger Freyther wrote: > So really quick question. Is there a way to statically populate the dev > tree > with the minimum of needed descriptors? A first try with mknod > /jail/dev/null > c 0... did not seem to work. > http://www.freebsd.org/doc/handbook/jails-bu

Hierachical jails devfs and rc.conf

2011-03-28 Thread Holger Freyther
Hi all, in FreeBSD 8.2-RELEASE it does not seem to be possible to pass children.max=X to a jail via rc.conf. What would be the best way of doing this? The next issue is what kind of security review/testing is needed to declare nullfs jailsafe but for now I can still bind my paths. My biggest pro