From: Eje Gustafsson (Macahan_at_fament.com)
Date: Thu 10 Apr 2003 - 16:10:32 BST
PS> On Thu, 10 Apr 2003, Alexander Alexandrov wrote:
>> Inside the vserver i can read any block device such as /dev/hd*.
>> I can't mount, but can do
PS> If you don't want the vserver to have direct access to `/dev/foo' then don't
PS> create it in the vserver!!!
PS> One of the things we do is disable the capability to create new device nodes
PS> *within* the vserver context, meaning that the vserver only has access to
PS> the ones that are already in its `/dev/' directory.
Are these the only one needed for normal operation inside a vserver ?
If so thank you and I will be doing some cleaning =)
PS> Something like:
PS> /dev/full
PS> /dev/null
PS> /dev/ptmx
PS> /dev/random
PS> /dev/tty
PS> /dev/urandom
PS> /dev/zero
PS> and the dynamic `/dev/pts' tree.
PS> -Paul
Best regards,
Eje Gustafsson mailto:MacAhan_at_fament.com
---
The Family Entertainment Network eFax : 240-376-7272
Phone : 620-231-7777 Fax : 620-231-4066
Online Store http://www.fament.com/catalog/
- Your Full Time Professionals -
---
[This E-mail scanned for viruses by Declude Virus]