Sponsored Content
Special Forums Cybersecurity How to jail a process in his repertory ? Post 302581289 by jim mcnamara on Monday 12th of December 2011 03:57:37 PM
Old 12-12-2011
You cannot chroot a process, you chroot jail a user account.

Create a user that has a home directory: /repertory/to/process, so /reprtory is really / for that user.

There are guides for for how to do this - most examples use ssh user accounts - here is an example:
Building a Secure User Environment with SSH ChRoot
 

8 More Discussions You Might Find Interesting

1. Linux

how can i jail a user?

I created a user useradd -d /disk2/ftpfiles me How would i beable to jail me so he could not move arround my file system? (4 Replies)
Discussion started by: byblyk
4 Replies

2. UNIX for Advanced & Expert Users

FBSD jail question

I'm trying to establish a jail on a FBSD 6.1 system and have a couple of questions on bringing up the daemon. Under the jail man page there are two user flags that I am unclear on, -u username The user name from host environment as whom the command should run. -U... (1 Reply)
Discussion started by: thumper
1 Replies

3. What is on Your Mind?

Should Paris Hilton be in Jail?

Enough of boring techie topics!! Vote on Paris Hilton and her jail time!! What do you think? (9 Replies)
Discussion started by: Neo
9 Replies

4. UNIX for Dummies Questions & Answers

How to start a chroot jail?

I was reading an article on how it is very important to setup a chroot jail to run bind. I can follow what the article says but one thing I am unclear about is now on system boot the BIND process in the chroot jail will start since it the owner will no longer be root but some other user. Can... (1 Reply)
Discussion started by: mojoman
1 Replies

5. Solaris

How to Jail ftp user

Hi Gurus, I am creating a user for ftp only on Solaris 10. However while testing I can see user can reach to root directory. I followed following while creating the user 1 Created a shell in /usr/bin/ftponly as chmod a+x to ftponly 2 Placed the entry in /etc/shells ... (2 Replies)
Discussion started by: kumarmani
2 Replies

6. UNIX for Advanced & Expert Users

ssh jail user

I have a developer that needs ssh access to a server to get to a specific directory. I want to restrict them to that directory. I've tried to set their shell as rksh which does jail them but only if they are using ssh from another unix system. If they are using putty or winscp they can still... (2 Replies)
Discussion started by: toor13
2 Replies

7. Shell Programming and Scripting

Need help with if an extension exists in a certain repertory

Hi, I was wondering if you can help me with verifying if certain extension exists in /var/log with an if statement. Basically I'm trying to see if there is a .Gz extension in the repertory /var/log. My code: if ; then echo ¨ The extension exist¨ else echo ¨theres no extension¨ fi ... (2 Replies)
Discussion started by: Froob
2 Replies

8. Cybersecurity

How to jail a process?

Hello people, I'm creating a web game control panel, where people can manage their gameserver on a php made control panel. But i have no idea how to create an jailed inviroment for the gameserver, I've looked at possebilites for chroot, but i don't want the gameserver has any binaries of linux... (1 Reply)
Discussion started by: gm33
1 Replies
JLS(8)							    BSD System Manager's Manual 						    JLS(8)

NAME
jls -- list jails SYNOPSIS
jls [-dhNnqsv] [-j jail] [parameter ...] DESCRIPTION
The jls utility lists all active jails, or the specified jail. Each jail is represented by one row which contains space-separated values of the listed parameters, including the pseudo-parameter all which will show all available jail parameters. A list of available parameters can be retrieved via ``sysctl -d security.jail.param''. See jail(8) for a description of some core parameters. If no parameters or any of the options -hns are given, the following four columns will be printed: jail identifier (jid), IP address (ip4.addr), hostname (host.hostname), and path (path). The following options are available: -d List dying as well as active jails. -h Print a header line containing the parameters listed. If no parameters are given on the command line, all is assumed. -N In the standard display mode, print each jail's name instead of its numeric ID. If the jail does not have a name, the numeric ID is printed instead. -n Print parameters in ``name=value'' format, where each parameter is preceded by its name. If no parameters are given on the command line, all is assumed. -q Put quotes around parameters if they contain spaces or quotes, or are the empty string. -s Print parameters suitable for passing to jail(8), skipping read-only and unused parameters. Implies -nq. -v Print a multiple-line summary per jail, with the following parameters: jail identifier (jid), hostname (host.hostname), path (path), jail name (name), jail state (dying), cpuset ID (cpuset), IP address(es) (ip4.addr and ip6.addr). -j jail The jid or name of the jail to list. Without this option, all active jails will be listed. SEE ALSO
jail_get(2), jail(8), jexec(8) HISTORY
The jls utility was added in FreeBSD 5.1. Extensible jail parameters were introduced in FreeBSD 8.0. BSD
July 20, 2012 BSD
All times are GMT -4. The time now is 08:11 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy