Re: jail and emulators/linux_base

On Wed, Dec 03, 2003 at 10:22:16AM +0100, Niklas Saers Mailinglistaccount wrote:
+> I'm running CURRENT and set up a jail where I want to install SUN JDK
+> 1.4.2. In the process, linux emulation needs to be installed. While
+> installing emulators/linux_base, I get the following:
+> 
+> ===> Installing for linux_base-7.1_5
+> Un-mounting linprocfs...
+> umount: retrying using path instead of file system ID
+> ===>  Generating temporary packing list
+> ===> Checking if emulators/linux_base already installed
+> mknod: /compat/linux/dev/null: Operation not permitted
+> *** Error code 1
+> 
+> While Linux-emulation is already up and running on the host-machine, it
+> seems the jail is not allowed to create what it needs to run it. I
+> understand allowing mknod(8) within a jail is dangerous in the case where
+> you allow untrusted users to be root. Is there some way to either say "I
+> don't let untrusted users be root" thus allowing this or to compile
+> emulators/linux_base more jail-friendly, possibly setting things up from
+> outside the jail?

Erm. You may install it using chroot(8) only and then run jail with the
same path. You may also use chroot(8) instead of jail if you're looking
for full functionality.

-- 
Pawel Jakub Dawidek                       pawel_at_dawidek.net
UNIX Systems Programmer/Administrator     http://garage.freebsd.pl
Am I Evil? Yes, I Am!                     http://cerber.sourceforge.net