Problem - Kevin Tafuro

Creating a jail is as simple as filling in a data structure with the appropriate information
and calling jail( ). The same caveats that apply to chroot( ) also apply to jail( )
because jail( ) calls chroot( ) internally. In particular, only the superuser may create
a jail successfully.
Presently, the jail configuration structure contains only four fields: version, path,
hostname, and ip_number. The version field must be set to 0, and the path field is
treated the same as chroot( )’s argument is. The hostname field sets the hostname of
the jail; however, it is possible to change it from within the jail.
The ip_number field is the IP address to which processes running within the jail are
restricted. Processes within the jail will only be able to bind to this address regardless
of what other IP addresses are assigned to the system. In addition, all IP traffic
emanating from processes within the jail will be forced to use this address as its
source.
The IP address assigned to a jail must be configured on the system; typically, it
should be set up as an alias rather than as the primary address for a network interface
unless the network interface is dedicated to the jail. For example, a system with
two network interfaces may be configured to route all traffic from processes outside
the jail to one interface, and route all traffic from processes inside the jail to the
other.
See Also
Recipe 2.12
70 | Chapter 2: Access Control
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.