Remove /dev/console from the jail /dev environment. It's probably not
strictly a security hole, but neither is it a very good idea. Replace it with a symlink to /dev/null to happify programs that expect it. It is suggested that users of the jail environment modify the jail's syslog.conf to not send stuff to /dev/console, but instead syslog it somewhere else. Such as a loghost, potentially even to the host environment's syslog. Approved by: jkh
This commit is contained in:
parent
c8e218c397
commit
a4d6222e61
@ -319,9 +319,10 @@ std)
|
||||
|
||||
jail)
|
||||
sh MAKEDEV std pty0
|
||||
rm mem kmem pci io klog # for security
|
||||
rm mem kmem pci io klog console # for security
|
||||
ln -sf null mem # for libkvm (ab)users
|
||||
ln -sf null kmem # --//--
|
||||
ln -sf null console
|
||||
;;
|
||||
|
||||
mach-4)
|
||||
|
Loading…
Reference in New Issue
Block a user