¡¡¡¡ÓÉÓÚϵͳ¹ÜÀíÊÇÒ»ÏîÀ§ÄѶøÓÖÁîÈ˷ѽâµÄÈÎÎñ£¬ Òò´ËÈËÃÇ¿ª·¢ÁËһϵÁÐÇ¿´óµÄ¹¤¾ß£¬ À´ÈùÜÀíÔ±µÄ¹¤×÷±äµÃ¸ü¼Ó¼òµ¥¡£ ÕâЩ¸Ä½øÍ¨³£ÊÇÈÃϵͳÄܹ»ÒÔ¸ü¼òµ¥µÄ·½Ê½°²×°¡¢ ÅäÖ㬠²¢ºÁÎÞÎÊÌâµØ³ÖÐøÔËת¡£ ÕâÆäÖУ¬ Ðí¶à¹ÜÀíԱϣÍûÄܹ»ÎªÏµÍ³ÕýÈ·µØ½øÐа²È«·½ÃæµÄÅäÖ㬠ʹÆäÄܹ»ÓÃÓÚÕæÕýµÄÓÃ;£¬ ¶ø×èÖ¹°²È«·½ÃæµÄ·çÏÕ¡£
¡¡¡¡FreeBSD ϵͳÌṩµÄÒ»ÏîÓÃÓÚ¸ÄÉÆ°²È«µÄ¹¤¾ß¾ÍÊÇ jail¡£ jail ÊÇÔÚ FreeBSD 4.X ÖÐÓÉ Poul-Henning Kamp <phk@FreeBSD.org>
ÒýÈëµÄ£¬ ËüÔÚ
FreeBSD 5.X ÖÐÓÖ½øÐÐÁËһϵÁиĽø£¬ ʹµÃËü³ÉΪÁËÒ»¸öÇ¿´ó¶øÁé»îµÄϵͳ¡£
ĿǰÈÔÈ»ÔÚ¶ÔÆä½øÐгÖÐøµÄ¿ª·¢£¬ ÒÔÌá¸ßÆä¿ÉÓÃÐÔ¡¢ ÐÔÄܺͰ²È«ÐÔ¡£
¡¡¡¡BSD-ÀàµÄ²Ù×÷ϵͳ´Ó 4.2BSD ¿ªÊ¼¼´ÌṩÁË chroot(8)¡£ chroot(2) ¹¤¾ßÄܹ»¸Ä±äÒ»×é½ø³ÌµÄ¸ùĿ¼µÄλÖ㬠´Ó¶ø½¨Á¢Ò»¸öÓëϵͳÖÐÆäËû²¿·ÖÏà¸ôÀëµÄ°²È«»·¾³£º ÔÚ chroot »·¾³ÖеĽø³Ì£¬ ½«ÎÞ·¨·ÃÎÊÆäÍâµÄÎļþ»òÆäËû×ÊÔ´¡£ ÕýÊÇÓÉÓÚÕâÖÖÄÜÁ¦£¬ ¼´Ê¹¹¥»÷Õß¹¥ÆÆÁËijһ¸öÔËÐÐÓÚ chroot »·¾³µÄ·þÎñ£¬ Ò²²»Äܹ¥ÆÆÕû¸öϵͳ¡£ chroot(8) ¶ÔÓÚÄÇЩ²»ÐèÒªºÜ¶àÁé»îÐÔ»ò¸´Ôӵĸ߼¶¹¦Äܵļòµ¥Ó¦ÓöøÑÔÏ൱ºÃÓᣠÁíÍ⣬ ÔÚÒýÈë chroot ¸ÅÄîµÄ¹ý³ÌÖУ¬ Ôø¾·¢ÏÖ¹ýÐí¶àÌø³ö chroot »·¾³µÄ·½·¨£¬ ¾¡¹ÜÕâЩÎÊÌâÔÚ½ÏÐ嵀 FreeBSD °æ±¾ÖÐÒѾÐÞÕý£¬ µ«ºÜÃ÷ÏԵأ¬ chroot(8) ²¢²»ÊÇÒ»ÏîÓÃÓڼӹ̷þÎñ°²È«µÄÀíÏë½â¾ö·½°¸¡£ Òò´Ë£¬ ±ØÐëʵÏÖÒ»¸öеÄ×ÓϵͳÀ´½â¾öÕâЩÎÊÌâ¡£
¡¡¡¡Õâ¾ÍÊÇΪʲôҪ¿ª·¢ jail ×îÖ÷ÒªµÄÔÒò¡£
¡¡¡¡Jail ÒÔ¶àÖÖ·½Ê½¸Ä½øÁË´«Í³µÄ chroot(2) »·¾³¸ÅÄî¡£ ÔÚ´«Í³µÄ chroot(2) »·¾³ÖУ¬ Ö»ÏÞÖÆÁ˽ø³ÌÄܹ»·ÃÎÊÎļþϵͳµÄÄÄЩ²¿·Ö¡£ ÆäËû²¿·ÖµÄϵͳ×ÊÔ´ (ÀýÈçϵͳÓû§¡¢ ÕýÔÚÔËÐеĽø³Ì£¬ ÒÔ¼°ÍøÂç×Óϵͳ) ÊÇÓÉ chroot ½ø³ÌÓëËÞÖ÷ϵͳÖÐµÄÆäËû½ø³Ì¹²ÏíµÄ¡£ jail À©Õ¹ÁËÕâ¸öÄ£ÐÍ£¬ Ëü²»½ö½«ÎļþϵͳµÄ·ÃÎÊÐéÄ⻯£¬ ¶øÇÒ»¹½«Óû§¡¢ FreeBSD µÄÍøÂç×Óϵͳ£¬ ÒÔ¼°Ò»Ð©ÆäËûϵͳ×ÊÔ´ÐéÄ⻯¡£ ¹ØÓÚÕâЩ¾«Ï¸¿ØÖÆÒÔ¼°µ÷Õû jail »·¾³·ÃÎÊÄÜÁ¦µÄ¸ü¾ßÌåµÄ½éÉÜ£¬ ¿É²Î¼û µÚ 15.5 ½Ú¡£
¡¡¡¡jail ¾ßÓÐÒÔÏÂËÄÏîÌØµã£º
Ŀ¼×ÓÊ÷ ©¤©¤ ½øÈë jail µÄÆðµã¡£ Ò»µ©½øÈëÁË jail£¬ ½ø³Ì¾Í²»ÔÙ±»ÔÊÐí·ÃÎÊÕâ¿Ã×ÓÊ÷ÒÔÍâµÄ¶ÔÏó¡£ ´«Í³ÉÏÓ°Ïìµ½×î³õ chroot(2) Éè¼ÆµÄ°²È«ÎÊÌâ²»»áÓ°Ïì FreeBSD jail¡£
Ö÷»úÃû ©¤©¤ ½«ÓÃÓÚ jail µÄÖ÷»úÃû¡£ jail Ö÷ÒªÓÃÓÚ´æ·ÅÍøÂç·þÎñ£¬ Òò´ËÔÚÿ¸ö mail ÉÏÄܹ»±ê×¢Ò»¸öÓÐÒâÒåµÄÖ÷»úÃû£¬ Äܹ»Ôںܴó³Ì¶ÈÉϼò»¯ÏµÍ³¹ÜÀíÔ±µÄ¹¤×÷¡£
IP µØÖ· ©¤©¤ Õâ¸öµØÖ·ÊÇÖ¸¶¨¸ø jail µÄ£¬ ÔÚ jail µÄÉúÃüÖÜÆÚÄÚ¶¼ÎÞ·¨¸Ä±ä¡£ ͨ³£ jail µÄ IP µØÖ·ÊÇijһ¸öÍøÂç½Ó¿ÚÉϵıðÃûµØÖ·£¬ µ«Õâ²¢²»ÊDZØÐèµÄ¡£
ÃüÁî ©¤©¤ ×¼±¸ÔÚ jail ÖÐÖ´ÐеĿÉÖ´ÐÐÎļþµÄÍêÕû·¾¶Ãû¡£ Õâ¸öÃüÁîÊÇÏà¶ÔÓÚ jail »·¾³µÄ¸ùĿ¼µÄ£¬ Ëæ jail »·¾³µÄÀàÐͲ»Í¬£¬ ¿ÉÄÜ»áÓкܶ಻֮ͬ´¦¡£
¡¡¡¡³ýÁËÕâЩ֮Í⣬ jail Ò²¿ÉÒÔÓµÓÐ×Ô¼ºµÄÓû§ºÍ×Ô¼ºµÄ root Óû§¡£ ×ÔÈ»£¬ ÕâÀïµÄ root Óû§µÄȨÁ¦»áÊÜÏÞÓÚ jail »·¾³£¬ ²¢ÇÒ£¬ ´ÓËÞÖ÷ϵͳµÄ¹Ûµã¿´À´£¬ jail root Óû§²¢²»ÊÇÒ»¸öÎÞËù²»ÄܵÄÓû§¡£ ´ËÍ⣬ jail ÖÐµÄ root Óû§²»ÄÜÖ´ÐгýÁËÆä¶ÔÓ¦ jail(8) »·¾³Ö®ÍâµÄϵͳÖеÄһЩ¹Ø¼ü²Ù×÷¡£ ¹ØÓÚ root Óû§µÄÄÜÁ¦ºÍÏÞÖÆ£¬ ÔÚºóÃæµÄ µÚ 15.5 ½Ú Öн«¼ÓÒÔ½éÉÜ¡£
±¾ÎĵµºÍÆäËüÎĵµ¿É´ÓÕâÀïÏÂÔØ£ºftp://ftp.FreeBSD.org/pub/FreeBSD/doc/.
Èç¹û¶ÔÓÚFreeBSDÓÐÎÊÌ⣬ÇëÏÈÔĶÁÎĵµ£¬Èç²»Äܽâ¾öÔÙÁªÏµ<questions@FreeBSD.org>.
¹ØÓÚ±¾ÎĵµµÄÎÊÌâÇë·¢ÐÅÁªÏµ <doc@FreeBSD.org>.