Messages in this thread | | | From | Matthias Urlichs <> | Subject | Re: lsm: add bsdjail documentation | Date | Fri, 08 Oct 2004 00:17:09 +0200 |
| |
Hi, Serge Hallyn wrote:
> + echo -n "ip 2.2.2.2" > /proc/$$/attr/exec (optional)
Please use RFC private addresses in example code.
That being said, bsdjail is a very good idea (which is why we're stealing it from BSD after all ...). It affords lightweight compartmentalization, in other words a chroot-on-steroids, which is exactly what I need to split one box into a couple of mostly-independent realms, and I assume that many ISP/ASP/whatever hosting people will agree.
Anyway, that's my vote for adding it to the kernel.
-- Matthias Urlichs - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |