Re: automatic creation of a chroot environment
Mario Marietto <[email protected]> Fri, 17 Jul 2026 00:06:22 +0200
| Newsgroups | gmane.os.freebsd.devel.hackers |
|---|---|
| Message-ID | <CA+1FSig_NM4O4T-j-wpZfMdAkDcnc4wkvRn=W-BDy6ydzbiXsA@mail.gmail.com> |
--000000000000b6ad1e0656c1a8fa Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable >I also meant on my website - in these VN issues: >- https://vermaden.wordpress.com/2026/05/25/valuable-news-2026-05-25/ >- https://vermaden.wordpress.com/2026/06/15/valuable-news-2026-06-15/ Thank you bro ! >Hi all, >chroot_env (https://github.com/rozhuk-im/chroot_env) is a lightweight >tmpfs+chroot sandbox for FreeBSD - no jails, no ZFS, RO by default, noexec/nosuid >on anything writable. As the author notes, one thing it doesn't touch is the >network stack: chroot(2) gives a sandboxed process the same network access as >its user has on the host. Someone read the code that I have provided for adding an opt-in network ACL without pulling in jails or VNET ? My sensation is that it has been forgotten for some reason. If it is not relevant for the project,let me know. This is a way for me to understand if I have understood what's the direction of the project. Anyway, I hope it can be useful. Mario. On Thu, Jul 16, 2026 at 11:01=E2=80=AFPM vermaden <[email protected]> wro= te: > > > yes, thanks. > > But I meant on your website, not on the FreeBSD forums. > > I also meant on my website - in these VN issues: > - https://vermaden.wordpress.com/2026/05/25/valuable-news-2026-05-25/ > - https://vermaden.wordpress.com/2026/06/15/valuable-news-2026-06-15/ > > My 'vernews' alias is for checking if something already been posted or no= t > :) > > Hope that helps. > > Regards, > vermaden > --=20 Mario. --000000000000b6ad1e0656c1a8fa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>>I also meant on my website - in these VN issues:<= br>>- <a href=3D"https://vermaden.wordpress.com/2026/05/25/valuable-news= -2026-05-25/" rel=3D"noreferrer" target=3D"_blank">https://vermaden.wordpre= ss.com/2026/05/25/valuable-news-2026-05-25/</a><br>>- <a href=3D"https:/= /vermaden.wordpress.com/2026/06/15/valuable-news-2026-06-15/" rel=3D"norefe= rrer" target=3D"_blank">https://vermaden.wordpress.com/2026/06/15/valuable-= news-2026-06-15/</a></div><div><br></div><div>Thank you bro !</div><div><di= v><br></div><div>>Hi all,</div><br>>chroot_env (<a href=3D"https://gi= thub.com/rozhuk-im/chroot_env" target=3D"_blank">https://github.com/rozhuk-= im/chroot_env</a>) is a lightweight >tmpfs+chroot sandbox for FreeBSD - no jails, no ZFS,= =20 RO by default, noexec/nosuid >on anything writable. As the author notes,= =20 one thing it doesn't touch is the >network stack: chroot(2) gives a= =20 sandboxed process the same network access as >its user has on the host.<= /div><div><br></div><div>Someone read the code that I have provided for add= ing an opt-in network ACL without pulling in jails or VNET ? My sensation i= s that it has been forgotten for some reason. If it is not relevant for the= project,let me know. This is a way for me to understand if I have understo= od what's the direction of the project. Anyway, I hope it can be useful= .</div><div><br></div><div>Mario.=C2=A0</div></div><br><div class=3D"gmail_= quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, = Jul 16, 2026 at 11:01=E2=80=AFPM vermaden <<a href=3D"mailto:vermaden@in= teria.pl">[email protected]</a>> wrote:<br></div><blockquote class=3D"= gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(20= 4,204,204);padding-left:1ex"><br> > yes, thanks.<br> > But I meant on your website, not on the FreeBSD forums.<br> <br> I also meant on my website - in these VN issues:<br> - <a href=3D"https://vermaden.wordpress.com/2026/05/25/valuable-news-2026-0= 5-25/" rel=3D"noreferrer" target=3D"_blank">https://vermaden.wordpress.com/= 2026/05/25/valuable-news-2026-05-25/</a><br> - <a href=3D"https://vermaden.wordpress.com/2026/06/15/valuable-news-2026-0= 6-15/" rel=3D"noreferrer" target=3D"_blank">https://vermaden.wordpress.com/= 2026/06/15/valuable-news-2026-06-15/</a><br> <br> My 'vernews' alias is for checking if something already been posted= or not :)<br> <br> Hope that helps.<br> <br> Regards,<br> vermaden<br> </blockquote></div><div><br clear=3D"all"></div><br><span class=3D"gmail_si= gnature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature">Ma= rio.<br></div> --000000000000b6ad1e0656c1a8fa--