Mercurial > hgrepos > FreeBSD > ports > sysutils > local-bsdtools

comparison sbin/fjail @ 174:9b23832722dd

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Make /usr/home a separate dataset in a jail. This makes it more analogous to the standard layout of boot environments.
author Franz Glasner <hg@dom66.de>
date Tue, 16 Aug 2022 11:11:28 +0200
parents 6782ac823f86
children c925150deac8
comparison
equal deleted inserted replaced
173:6782ac823f86 174:9b23832722dd
173 return 1 173 return 1
174 fi 174 fi
175 zfs create ${_zfsopts} -o atime=off "${_ds}" 175 zfs create ${_zfsopts} -o atime=off "${_ds}"
176 zfs create ${_zfsopts} -o sync=disabled -o setuid=off "${_ds}/tmp" 176 zfs create ${_zfsopts} -o sync=disabled -o setuid=off "${_ds}/tmp"
177 zfs create ${_zfsopts} "${_ds}/usr" 177 zfs create ${_zfsopts} "${_ds}/usr"
178 zfs create ${_zfsopts} -o setuid=off "${_ds}/usr/home"
178 zfs create ${_zfsopts} "${_ds}/usr/local" 179 zfs create ${_zfsopts} "${_ds}/usr/local"
179 zfs create ${_zfsopts} "${_ds}/var" 180 zfs create ${_zfsopts} "${_ds}/var"
180 zfs create ${_zfsopts} -o exec=off -o setuid=off "${_ds}/var/audit" 181 zfs create ${_zfsopts} -o exec=off -o setuid=off "${_ds}/var/audit"
181 zfs create ${_zfsopts} -o exec=off -o setuid=off "${_ds}/var/cache" 182 zfs create ${_zfsopts} -o exec=off -o setuid=off "${_ds}/var/cache"
182 zfs create ${_zfsopts} -o exec=off -o setuid=off -o compression=off "${_ds}/var/cache/pkg" 183 zfs create ${_zfsopts} -o exec=off -o setuid=off -o compression=off "${_ds}/var/cache/pkg"