The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
25 views

Jail in chroot in debian 7.5 - Privileges Separation problem

I'm trying to create a jail for a user in my server. Let's call the user "juser". What do I want to achieve? I want an ssh user to be jailed in his home folder and not have any access (whatsoever) on ...
-2
votes
0answers
10 views

PostgreSQL on Chroot Jail

I'm trying to run in a JAIL PostgresSQL but I can't make it work. What are the libraries and procedure to run PostgreSQL inside a JAIL.
1
vote
1answer
65 views

How do I know if I'm in a jail, container, snapshot, etc. environment? [duplicate]

I received a machine (Ubuntu 12.04 server) from a coworker when he left the company. I created my own user as sudo/admin and used the machine for months via SSH. After rebooting for the first time ...
10
votes
1answer
333 views

Linux: Is there handy way to exec a program binding it to IP-address of choice?

In FreeBSD 4.9 it was very easy to accomplish with just a single command like jail [-u username] path hostname ip-number command if path was / you had running just the same program as usual but ...
2
votes
1answer
32 views

Absolutely jail a user with minimum IP, file, & command rights

I am trying to secure a custom application as much as possible from outside tampering. I've seen many pages on jailing a user, but they usually include many exceptions, and I want to lock down this ...
2
votes
0answers
42 views

Update jails FreeBSD in silent mode

What if I want to add all process to the cron? Is there silent way to upgrade jail? After these steps: # make buildworld # make installworld DESTDIR=/jails/somejail It comes time to: # ...
7
votes
1answer
5k views

Linux LXC vs FreeBSD jail

Are there any notable differences between LXC (Linux containers) and FreeBSD's jails in terms of security, stability & performance? On first look, both approaches look very similar.
4
votes
1answer
57 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
0
votes
0answers
126 views

How to get portage to emerge in a FreeBSD Jail?

I am running FreeNAS 9.2.1.2 which allows you to install a Gentoo jail with a one click install that creates a jail on the Free BSD system. I then tried to run emerge -avuDN world and ran into some ...
1
vote
1answer
7k views

FreeNAS 9.2: install FreeBSD packages

I have installed FreeNAS 9.2amd64 (based on the same FreeBSD version) on a VirtualBox VM. I created users and pool/volume for my data. In anticipation of installing ...
4
votes
3answers
814 views

Running Viber as another user while using “mine” X Server's microphine and speakers

I run Fedora with GNOME and recently installed Viber for linux. It's very good and all is working just fine. As Viber is not open-source software, I decided to run it as another user to make sure ...
4
votes
2answers
2k views

How to install PostgreSQL 9.3 in FreeBSD jail?

I configured virtual NICS using pf, and a jail for FreeBSD using qjail create pgsql-jail 192.168.0.3. When I tried to install PostgreSQL 9.3 using port collection, it shows strange message at first. ...
2
votes
0answers
285 views

How to configure Sendmail in a jail to get correct FQDN?

I am building a mail server using FreeBSD 9.1-RELEASE with a jail. On the direct OS, all what I have to do was only adding my domain name to /etc/mail/local-host-names file. Anyway I wanted to run ...
4
votes
3answers
730 views

Can LXC be used to jail instances of an installed browser?

Is it possible to use LXC on a desktop system to confine browsers and other pieces of software that have in the past been shown to be prone to certain kinds of exploits. So what I want to achieve is ...
1
vote
1answer
1k views

Jail only a specific user with vsftpd

I'm using both Redhat and CentOS. When I do followings: # vi /etc/vsftpd/vsftpd.conf chroot_local_user=YES # service vsftpd restart Then all users are jailed in their home directory. How can I ...
6
votes
3answers
376 views

How does bash know how it is being invoked?

I've installed jailkit on Ubuntu 12.04 and I have set up a user's shell to /bin/bash - but when it is invoked it runs /etc/bash.bashrc instead of /etc/profile If you haven't used jailkit before ...
2
votes
1answer
925 views

How to achieve the effect of chroot in userspace in Linux (without being root)?

The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
1
vote
1answer
224 views

the right way to synchronise sources on freebsd

Update: I'm happy to report @dartonw 's answer worked and I went and did a checkout and then buildworld and it built successfully in about 6 hours. So I've been having some issues with jails in ...
2
votes
1answer
2k views

enable networking inside a freebsd jail

So I'm mostly a linux newbie itself. Let alone freebsd, so please bear with me. I just need some very basic clues to get this to work. I use FreeBSD 9.1 64-bit from the list here. On my freebsd ...
4
votes
1answer
2k views

How can I mount a directory of the host system for use inside a FreeBSD jail?

I am performing the following on FreeBSD 9.0-STABLE: mount_nullfs /foo /jail/foo After that, from within the host system, the mount works. So this works: touch /foo/bar && ls /jail/foo/bar ...
0
votes
1answer
276 views

SSH minimal rights user - su only [duplicate]

Possible Duplicate: Creating a UNIX account which only executes one command I am trying to setup a user account that only has as minimal rights as possible. The user should be able to log ...
0
votes
0answers
239 views

PC BSD Warden network interface

The documentation for PC BSD's Warden mentions that the configuration of the right network interface is crucial. However, it doesn't say what the "right" interface is. This may sound like a stupid ...
4
votes
4answers
216 views

“Virtual” shell, ie. jailing an user inside a process after the (SSH) login

The title might not say much about the issue at hand so let me get straight to the point. Let's assume I have a casual user who can log in to the system via SSH into a bash shell. I also have a PHP ...
4
votes
2answers
3k views

Is there an easy way to create a FreeBSD rc script?

I have a FreeBSD jail in which I run a server using the command: /usr/sbin/daemon /path/to/script.py At the moment I have to run this command every time I restart the machine and the jail starts. ...
3
votes
1answer
543 views

Network interfaces for Jails

I have been reading over the creation of Jails on FreeBSD, and one stumbling block I have is regarding network interfaces. Say my local router is 10.0.2.1, and the BSD box is 10.0.2.5. I would like ...
2
votes
5answers
2k views

How to completely hide stuff from a user?

I want to let some of my friends access my computer by making them user accounts. They will mostly access my computer by sftp and ssh, but they could also sometimes access it at my home. However I ...
4
votes
2answers
630 views

How can I use Skype with lxc?

Under Scientific-linux? https://en.wikipedia.org/wiki/LXC I just want to separate Skype, because I don't trust it. We are using it only to call/chat with people, no file transfers!
6
votes
3answers
493 views

How to jail a fastcgi server (or a web-proxied server)?

If you have a web-server (e.g. nginx) often you use a fast-cgi server or another application-http-server for dynamic content. That means in both cases you have a nice process separation between the ...
7
votes
4answers
354 views

How can I safely give a shell to somebody?

I have a question about giving a shell account to somebody. How safe is it? He could read /etc. How can I give a secured shell account that will only restrict the user to some bins and his own home? ...
15
votes
3answers
4k views

How to “jail” a process without being root?

Were I root, I could simply create a dummy user/group, set file permissions accordingly and execute the process as that user. However I am not, so is there any way to achieve this without being root?
3
votes
1answer
510 views

What does 'mergemaster' do that 'make distribution' doesn't?

After calling make installworld (or make world), there are two ways of updating source files in the new world: calling mergemaster -p or make distribution. I know that mergemaster calls make ...