3 ms·
Please search this HN comment thread for "jail" and my own comment - I am curious about your thoughts ...
by rsync 9y ago
Please search this HN comment thread for "jail" and my own comment - I am curious about your thoughts ...
- api 9y agoJails are closer. They are perhaps a way of achieving some of this. The problem (unless I'm wrong) is that you need root to create one, so you are back to needing root for everything.
- rsync 9y agoYes, of course the base systems root is necessary to create the jail, but then the jail has its own root user as well as its own /etc/passwd (and /etc/everythingelse). For many, many purposes (almost all ?) a FreeBSD jail is indistinguishable to the root user from a bare metal server.