4 ms·
Some code you can just drop in, other code needs more extensive changes because the internals are different. It would be interesting to map the cross pollinatio
by justincormack 12y ago
Some code you can just drop in, other code needs more extensive changes because the internals are different. It would be interesting to map the cross pollination, there is a lot.
I believe jails is a philosophical issue, it is very hard to show that it actually provides isolation.
- tedunangst 12y ago> I believe jails is a philosophical issue, it is very hard to show that it actually provides isolation. Indeed. In theory, the kernel runs at a security/isolation level above root, but in practice root can often subvert it. That said, OpenBSD also offers rdomains, which aren't quite jails but provide a somewhat similar degree of network separation.