The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
0answers
17 views

Update jails FreeBSD in silent mode

What if I want to add all process to the cron? Is there silent way to upgrade jail? After these steps: # make buildworld # make installworld DESTDIR=/jails/somejail It comes time to: # ...
4
votes
1answer
564 views

Linux LXC vs FreeBSD jail

Are there any notable differences between LXC (Linux containers) and FreeBSD's jails in terms of security, stability & performance? On first look, both approaches look very similar.
4
votes
1answer
46 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
0
votes
0answers
61 views

How to get portage to emerge in a FreeBSD Jail?

I am running FreeNAS 9.2.1.2 which allows you to install a Gentoo jail with a one click install that creates a jail on the Free BSD system. I then tried to run emerge -avuDN world and ran into some ...
1
vote
1answer
3k views

FreeNAS 9.2: install FreeBSD packages

I have installed FreeNAS 9.2amd64 (based on the same FreeBSD version) on a VirtualBox VM. I created users and pool/volume for my data. In anticipation of installing ...
4
votes
3answers
662 views

Running Viber as another user while using “mine” X Server's microphine and speakers

I run Fedora with GNOME and recently installed Viber for linux. It's very good and all is working just fine. As Viber is not open-source software, I decided to run it as another user to make sure ...
4
votes
2answers
946 views

How to install PostgreSQL 9.3 in FreeBSD jail?

I configured virtual NICS using pf, and a jail for FreeBSD using qjail create pgsql-jail 192.168.0.3. When I tried to install PostgreSQL 9.3 using port collection, it shows strange message at first. ...
2
votes
0answers
201 views

How to configure Sendmail in a jail to get correct FQDN?

I am building a mail server using FreeBSD 9.1-RELEASE with a jail. On the direct OS, all what I have to do was only adding my domain name to /etc/mail/local-host-names file. Anyway I wanted to run ...
4
votes
3answers
403 views

Can LXC be used to jail instances of an installed browser?

Is it possible to use LXC on a desktop system to confine browsers and other pieces of software that have in the past been shown to be prone to certain kinds of exploits. So what I want to achieve is ...
1
vote
1answer
527 views

Jail only a specific user with vsftpd

I'm using both Redhat and CentOS. When I do followings: # vi /etc/vsftpd/vsftpd.conf chroot_local_user=YES # service vsftpd restart Then all users are jailed in their home directory. How can I ...
6
votes
3answers
297 views

How does bash know how it is being invoked?

I've installed jailkit on Ubuntu 12.04 and I have set up a user's shell to /bin/bash - but when it is invoked it runs /etc/bash.bashrc instead of /etc/profile If you haven't used jailkit before ...
2
votes
1answer
725 views

How to achieve the effect of chroot in userspace in Linux (without being root)?

The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
1
vote
1answer
194 views

the right way to synchronise sources on freebsd

Update: I'm happy to report @dartonw 's answer worked and I went and did a checkout and then buildworld and it built successfully in about 6 hours. So I've been having some issues with jails in ...
2
votes
1answer
1k views

enable networking inside a freebsd jail

So I'm mostly a linux newbie itself. Let alone freebsd, so please bear with me. I just need some very basic clues to get this to work. I use FreeBSD 9.1 64-bit from the list here. On my freebsd ...
4
votes
1answer
1k views

How can I mount a directory of the host system for use inside a FreeBSD jail?

I am performing the following on FreeBSD 9.0-STABLE: mount_nullfs /foo /jail/foo After that, from within the host system, the mount works. So this works: touch /foo/bar && ls /jail/foo/bar ...
0
votes
1answer
239 views

SSH minimal rights user - su only [duplicate]

Possible Duplicate: Creating a UNIX account which only executes one command I am trying to setup a user account that only has as minimal rights as possible. The user should be able to log ...
0
votes
0answers
204 views

PC BSD Warden network interface

The documentation for PC BSD's Warden mentions that the configuration of the right network interface is crucial. However, it doesn't say what the "right" interface is. This may sound like a stupid ...
4
votes
4answers
206 views

“Virtual” shell, ie. jailing an user inside a process after the (SSH) login

The title might not say much about the issue at hand so let me get straight to the point. Let's assume I have a casual user who can log in to the system via SSH into a bash shell. I also have a PHP ...
3
votes
2answers
2k views

Is there an easy way to create a FreeBSD rc script?

I have a FreeBSD jail in which I run a server using the command: /usr/sbin/daemon /path/to/script.py At the moment I have to run this command every time I restart the machine and the jail starts. ...
3
votes
1answer
444 views

Network interfaces for Jails

I have been reading over the creation of Jails on FreeBSD, and one stumbling block I have is regarding network interfaces. Say my local router is 10.0.2.1, and the BSD box is 10.0.2.5. I would like ...
2
votes
5answers
2k views

How to completely hide stuff from a user?

I want to let some of my friends access my computer by making them user accounts. They will mostly access my computer by sftp and ssh, but they could also sometimes access it at my home. However I ...
2
votes
1answer
494 views

How can I use Skype with lxc?

Under Scientific-linux? https://en.wikipedia.org/wiki/LXC I just want to separate Skype, because I don't trust it. We are using it only to call/chat with people, no file transfers!
5
votes
3answers
454 views

How to jail a fastcgi server (or a web-proxied server)?

If you have a web-server (e.g. nginx) often you use a fast-cgi server or another application-http-server for dynamic content. That means in both cases you have a nice process separation between the ...
7
votes
4answers
345 views

How can I safely give a shell to somebody?

I have a question about giving a shell account to somebody. How safe is it? He could read /etc. How can I give a secured shell account that will only restrict the user to some bins and his own home? ...
15
votes
3answers
3k views

How to “jail” a process without being root?

Were I root, I could simply create a dummy user/group, set file permissions accordingly and execute the process as that user. However I am not, so is there any way to achieve this without being root?
3
votes
1answer
467 views

What does 'mergemaster' do that 'make distribution' doesn't?

After calling make installworld (or make world), there are two ways of updating source files in the new world: calling mergemaster -p or make distribution. I know that mergemaster calls make ...