3 ms·
A few order of magnitudes? Can you be more specific? I'm genuinely wondering what you could be referring to that I've missed.
by mardifoufs 3y ago
A few order of magnitudes? Can you be more specific? I'm genuinely wondering what you could be referring to that I've missed.
- tptacek 3y agochroot more or less isn't secure at all. All they're really saying is that Jails aren't built on top of chroot, but rather are a ground-up reimplementation motivated by improving chroot.
- mardifoufs 3y agoAh! For some reason I thought jails were built on something similar to chroot at the kernel level, meaning that it also came with the same security caveats. (to be more accurate, I knew that it was not "on top" in the same way as Linux containers are built on top of chroot. )
- bell-cot 3y agohttps://en.wikipedia.org/wiki/Operating_system-level_virtualization#Implementations https://en.wikipedia.org/wiki/Operating_system-level_virtual... or https://en.wikipedia.org/wiki/Freebsd_jail https://en.wikipedia.org/wiki/Freebsd_jail
- NexRebular 3y agoAlso the SANE paper: http://therbelot.free.fr/Install_FreeBSD/jail/jail.pdf http://therbelot.free.fr/Install_FreeBSD/jail/jail.pdf