diff options
| author | Christian Brueffer <brueffer@FreeBSD.org> | 2009-04-27 20:38:27 +0000 |
|---|---|---|
| committer | Christian Brueffer <brueffer@FreeBSD.org> | 2009-04-27 20:38:27 +0000 |
| commit | bbee93cbf5d500602bc24f6563ce78ad403c665e (patch) | |
| tree | bb2e9267ff7471960ba4bebc384e984f2fb7188b | |
| parent | 4679e4f9c4e6368971d14ab95d10e9184c5821c4 (diff) | |
Notes
| -rw-r--r-- | usr.bin/cpuset/cpuset.1 | 6 | ||||
| -rw-r--r-- | usr.sbin/jail/jail.8 | 6 |
2 files changed, 12 insertions, 0 deletions
diff --git a/usr.bin/cpuset/cpuset.1 b/usr.bin/cpuset/cpuset.1 index 0310793c4f37..e468c1c562ed 100644 --- a/usr.bin/cpuset/cpuset.1 +++ b/usr.bin/cpuset/cpuset.1 @@ -177,3 +177,9 @@ command first appeared in .Fx 7.1 . .Sh AUTHORS .An Jeffrey Roberson Aq jeff@FreeBSD.org +.Sh BUGS +At the moment it is possible for a superuser inside a +.Xr jail 8 +to modify the root +.Xr cpuset 2 +of that jail. diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8 index 3a0767e66144..ffbd404bbb19 100644 --- a/usr.sbin/jail/jail.8 +++ b/usr.sbin/jail/jail.8 @@ -699,3 +699,9 @@ Currently, the simplest answer is to minimize services offered on the host, possibly limiting it to services offered from .Xr inetd 8 which is easily configurable. +.Pp +At the moment it is possible for a superuser inside a +.Nm +to modify the root +.Xr cpuset 2 +of that jail. |