The jails tag has no wiki summary.
2
votes
1answer
85 views
How to achieve the effect of chroot in userspace in Linux (without being root)?
The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
1
vote
1answer
84 views
the right way to synchronise sources on freebsd
Update: I'm happy to report @dartonw 's answer worked and I went and did a checkout and then buildworld and it built successfully in about 6 hours.
So I've been having some issues with jails in ...
2
votes
1answer
207 views
enable networking inside a freebsd jail
So I'm mostly a linux newbie itself. Let alone freebsd, so please bear with me. I just need some very basic clues to get this to work. I use FreeBSD 9.1 64-bit from the list here.
On my freebsd ...
4
votes
1answer
101 views
How can I mount a directory of the host system for use inside a FreeBSD jail?
I am performing the following on FreeBSD 9.0-STABLE:
mount_nullfs /foo /jail/foo
After that, from within the host system, the mount works. So this works:
touch /foo/bar && ls /jail/foo/bar
...
0
votes
1answer
136 views
SSH minimal rights user - su only [duplicate]
Possible Duplicate:
Creating a UNIX account which only executes one command
I am trying to setup a user account that only has as minimal rights as possible.
The user should be able to log ...
0
votes
0answers
94 views
PC BSD Warden network interface
The documentation for PC BSD's Warden mentions that the configuration of the right network interface is crucial.
However, it doesn't say what the "right" interface is. This may sound like a stupid ...
3
votes
3answers
141 views
“Virtual” shell, ie. jailing an user inside a process
The title might not say much about the issue at hand so let me get straight to the point.
Let's assume I have a casual user who can log in to the system via SSH into a bash shell. I also have a PHP ...
1
vote
2answers
589 views
Is there an easy way to create a FreeBSD rc script?
I have a FreeBSD jail in which I run a server using the command:
/usr/sbin/daemon /path/to/script.py
At the moment I have to run this command every time I restart the machine and the jail starts. ...
3
votes
1answer
207 views
Network interfaces for Jails
I have been reading over the creation of Jails on FreeBSD, and one stumbling block I have is regarding network interfaces.
Say my local router is 10.0.2.1, and the BSD box is 10.0.2.5. I would like ...
1
vote
5answers
885 views
How to completely hide stuff from a user?
I want to let some of my friends access my computer by making them user accounts. They will mostly access my computer by sftp and ssh, but they could also sometimes access it at my home. However I ...
1
vote
1answer
234 views
How can I use Skype with lxc?
Under Scientific-linux?
https://en.wikipedia.org/wiki/LXC
I just want to separate Skype, because I don't trust it. We are using it only to call/chat with people, no file transfers!
5
votes
3answers
347 views
How to jail a fastcgi server (or a web-proxied server)?
If you have a web-server (e.g. nginx) often you use a fast-cgi server or another application-http-server for dynamic content. That means in both cases you have a nice process separation between the ...
6
votes
4answers
304 views
How can I safely give a shell to somebody?
I have a question about giving a shell account to somebody. How safe is it? He could read /etc. How can I give a secured shell account that will only restrict the user to some bins and his own home? ...
12
votes
3answers
2k views
How to “jail” a process without being root?
Were I root, I could simply create a dummy user/group, set file permissions accordingly and execute the process as that user. However I am not, so is there any way to achieve this without being root?
3
votes
1answer
297 views
What does 'mergemaster' do that 'make distribution' doesn't?
After calling make installworld (or make world), there are two ways of updating source files in the new world: calling mergemaster -p or make distribution. I know that megermaster calls make ...
