[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Freebsd Jails implementation over OpenBSD
Hello,
Following the proactively secure statement of OpenBSD, I think it would be indeed a good idea to implement the Jails functionality originally
implemented over FreeBSD 4.0, which creates virtual machines over a host machine. Certainly this would be safer than using plain chroot() for
security as it is done today, and the jails would increase even more the security in various enviroments. Also, the FreeBSD code brings safer
and more functional chroot() code, which was patched accordingly to the jail design. Implementing the code over OpenBSD wouldn't be trivial,
as it would require a lot of porting, but wouldn't be blatantly hard, as the both the systems still share much from the original BSD system design
and as the jail patch of FreeBSD consists of no more than 400 lines of code, approximatelly 200 lines distributed over around 50 files plus more
200 lines in two new kernel files. I guess it is a very nice idea, I have the spare time to do it or at least to help a lot towards it. Do you think it is
worth the time? I appreciate ideas and opinions.
More information on Jails can be obtained at the FreeBSD documentantion, specifically at http://docs.freebsd.org/44doc/papers/jail/jail.ps.gz
and at the jail(2) and jail(8) FreeBSD manpages.
Thank you for the attention,
--geraldo