How to start a chroot jail? Post: 302308442

9 More Discussions You Might Find Interesting

1. Linux

how can i jail a user?

I created a user useradd -d /disk2/ftpfiles me How would i beable to jail me so he could not move arround my file system?

2. UNIX for Dummies Questions & Answers

I don't want to go to jail. so I want to start using unix

I use Mac OSX and have been given all of my video editing software... illegally. I don't want to use it anymore and heard that Unix was the way to go. So that is why I am here. What video editing software is out there for Unix. I think I have Unix. Do I? I am sorry and if all anyone can...

3. UNIX for Advanced & Expert Users

FBSD jail question

I'm trying to establish a jail on a FBSD 6.1 system and have a couple of questions on bringing up the daemon. Under the jail man page there are two user flags that I am unclear on, -u username The user name from host environment as whom the command should run. -U...

4. Debian

SSH chroot jail problems

Firstly Hi everyone :) I setup SFTP and SSH jail using this tutorial: http://www.howtoforge.com/chrooted-ssh-sftp-tutorial-debian-lenny SFTP jail works however now when I try to SSH it accepts my password and then just goes to a blank screen. Type any command and the shell session is...

5. UNIX for Advanced & Expert Users

Chroot jail environment puzzle

I have a simple sandbox program which runs a command as user "nobody" in a chroot jail. It sets resource limits with setrlimit, changes the user id with setuid, changes the root dir with chroot, and then calls exec to execute the command given as command line parameters. It is of course a...

6. UNIX for Advanced & Expert Users

ssh jail user

I have a developer that needs ssh access to a server to get to a specific directory. I want to restrict them to that directory. I've tried to set their shell as rksh which does jail them but only if they are using ssh from another unix system. If they are using putty or winscp they can still...

7. Red Hat

sftp jail chroot env setup

Hi I need a specific user to be able to sftp to a server and get files from a specific location. The location is not the users home dir, i don't want the user to be able to view anything else apart from the files in that area. e.g ftp file are is - /logging/phplogs e.g user home is...

8. Cybersecurity

How to jail a process?

Hello people, I'm creating a web game control panel, where people can manage their gameserver on a php made control panel. But i have no idea how to create an jailed inviroment for the gameserver, I've looked at possebilites for chroot, but i don't want the gameserver has any binaries of linux...

9. UNIX for Beginners Questions & Answers

Iso - remaster script trying to start chroot run commands then exit but host system gets messed up

The script works and creates a modified iso fine until I added the chrootbeg and chrootend functions and executed them. I'm sorry if I did something wrong this is my first post. I uploaded entire bash script for reference or in case you want to run it to debug it is called isoremast.txt. ...

LEARN ABOUT DEBIAN

jailer.conf

JAILER(5)							File Formats Manual							 JAILER(5)

NAME

       jailer.conf - configuration file of jailer

SYNOPSIS

       jailer.conf

DESCRIPTION

       jailer is a script for creating chrooted environments for Debian packages.

       jailer.conf is the configuration file for jailer.conf

       Every configuration definition has to start and end with a jail identifier, which should be unique and be in brackets.

       <apache>
	      For example, an Apache chroot identifier should look like this:

       </apache>
	      The identifier use needs to be closed.

	      The  configuration for the chroot instance is defined inside these identifiers. The following lines can be used to describe the con-
	      figuration:

       Root: /var/chroot/apache

	      This line describes the PATH of the chrooted enviroment.

       Conf:

	      This line describes the PATH or PATH/filename  which  should  be	copied	over  to  the  chrooted  environment.  For  example  Conf:
	      /etc/apache/* , which uses a wild card.

       Debs:

	      This line contains the name of those Debian packages which should be installed into the chrooted environment.

       Junk-Debs:

	      This line contains those deb packages which should not be installed into the chrooted environment.

       Junk:

	      This line contains those files or directories which should not be installed. For example /lib/* means all files and links under /lib
	      should not be installed, while /lib/libconsole.so.0.0.0 means a file which should not to be installed.

       Extra:

	      This line contains those files or directories which should be installed into the chrooted environment. For  example:  /var/run  will
	      install that a directory which is needed for the chrooted service.

WARNING

       Do  not	configure your daemon inside your jail, because updatejail script will wipe out all the data inside the jail. If you would want to
       change any settings inside the jail, make the changes in the original location and then run updatejail . This makes it possible to place  a
       jail even to a ramdisk.

SEE ALSO

       updatejail(8) jailer.conf(5), dpkg(8)

AUTHOR

       This manual page was written by Peter Holtzl <peter.holtzl@balabit.hu>.

								 December 4, 2001							 JAILER(5)