The tag has no usage guidance.

learn more… | top users | synonyms

5
votes
2answers
3k views

How to install PostgreSQL 9.3 in FreeBSD jail?

I configured virtual NICS using pf, and a jail for FreeBSD using qjail create pgsql-jail 192.168.0.3. When I tried to install PostgreSQL 9.3 using port collection, it shows strange message at first. ...
1
vote
0answers
22 views

Why does copying /lib into a chroot jail not work? [closed]

I am working on a chroot jail that runs dropbear on an embedded system. I have created the jail, and tested it works. The issue I'm having is with dropbear. (dropbear is running in the chroot ...
4
votes
1answer
113 views

Separate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
33
votes
1answer
21k views

Linux LXC vs FreeBSD jail

Are there any notable differences between LXC (Linux containers) and FreeBSD's jails in terms of security, stability & performance? On first look, both approaches look very similar.
3
votes
0answers
65 views

Accessing ports on public IP from within a FreeBSD jail

In a FreeBSD 10 setup, I have a jail running the publicly accessible nginx web server and another jail for the Java backend server based on Jetty. Each jail has its own internal IP address 127.0.1.x ...
3
votes
1answer
150 views

How to change Squid service UID in FreeBSD?

Strangely enough, it appears that Squid cannot start if the squid user is not affected to the UID 100. When trying to use another PID, the service systematically fails to start with the following ...
0
votes
0answers
31 views

ownCloud permissions wrong

I've got ownCloud running in a FreeNAS jail and it worked flawlessly until I rebooted the system. Now I get an error saying: The datadirectory (/media) is readable for other users. Change the ...
1
vote
1answer
48 views

FreeBSD - UFS equivalent of ZFS command

I'm trying to configure jails with this tutorial. Since I don't want to use ZFS, could anyone tell me the UFS equivalent of zfs create -o mountpoint=/local/jails zpool/jails chmod 700 /local/jails ...
5
votes
3answers
16k views

FreeNAS 9.2: install FreeBSD packages

I have installed FreeNAS 9.2amd64 (based on the same FreeBSD version) on a VirtualBox VM. I created users and pool/volume for my data. In anticipation of installing ...
2
votes
2answers
3k views

enable networking inside a freebsd jail

So I'm mostly a linux newbie itself. Let alone freebsd, so please bear with me. I just need some very basic clues to get this to work. I use FreeBSD 9.1 64-bit from the list here. On my freebsd ...
2
votes
1answer
282 views

FreeBSD - No internet connection inside jail

I am currently trying to set up a server on FreeBSD. I want to create jails with ezjails according to the handbook. I am following the example to install BIND inside a jail but I am stuck at the ...
1
vote
1answer
159 views

ezjail: update problems

I'm having problems whenever I try to update my ezjail baseball on FreeSDB 10. I'm on FreeBSD 10.2-RELEASE-p11 and ezjail v3.4.2 The jails show the right version inside but the update progress ...
6
votes
4answers
2k views

Can LXC be used to jail instances of an installed browser?

Is it possible to use LXC on a desktop system to confine browsers and other pieces of software that have in the past been shown to be prone to certain kinds of exploits. So what I want to achieve is ...
2
votes
1answer
135 views

FreeBSD jails - Nginx, PHP-FPM, Wordpress - Share folder between jails (read-only)

Question I want to seperate PHP (PHP-FPM) and Nginx into different jails. One jail with Nginx, and one with PHP-FPM / PHP / Wordpress. Nginx is good at serving static assets, so I would like to ...
1
vote
1answer
174 views

FreeBSD: adding ip alias to interface breaks network on primary ip

I am trying to add an alias to my network card (I would like to use jails) on my FreeBSD box. It is running version 10.2-RELEASE-p7 (generic amd64 kernel). The machine is running in a Hyper-V virtual ...
2
votes
1answer
51 views

Can I jail an older 32-bit FreeBSD on a (current) 64-bit FreeBSD?

My question is actually pretty much in the title. Is it possible to jail an older 32-bit FreeBSD, such as 6.4 or 8.4 in a 64-bit FreeBSD 10.2? I'll also appreciate pointers and explanations on how to ...
1
vote
2answers
36 views

How is OpenSSH sftp jail/chroot working?

This question is actually too broad... What I really want to know is whether or not it actually chroots and, if so, how a SSH user deamon[1] can be launched in that jail in spite of the obvious lack ...
2
votes
1answer
61 views

Is there a way to isolate a running program from the rest of a Linux system?

First of all, I know about virtualisation and containers. I'm sure "he wants containers" is what popped in your mind. (Don't deny it!) However containers are like chroot: if you want to execute bash ...
1
vote
1answer
554 views

FreeBSD: IPv6 in Jails (ezjail)

I'm on FreeBSD 10.1 and in the process of setting up a server. After some hassle I managed to get IPv6 running. I'm now setting up jails with ezjail and I learned how to set up a working flavor and a ...
0
votes
1answer
39 views

Logout from jail

I'm trying to use FreeNAS on my office along with Syncthing, and some things are giving me headache. FreeNAS installed Syncthing as a jail, and I did the jexec command to login into the jail, but now ...
2
votes
1answer
71 views

Restrict user script execution

I have a game engine running on a Debian server. The game involves bots, which are coded in Python by the players. A player write a bot in Python Upon validation, the code is sent to the server A ...
0
votes
0answers
34 views

List all dependencies for package

I am configuring a ubuntu 14.04 server, for making it more secure i wanted to jail each user to his home directory. So far this worked as expected. But-;)-i am installed a complete RoR ...
2
votes
1answer
114 views

Is it possible to create a freebsd 10 or 11 jail in freebsd 9?

My title question is exactly my question : is it possible to create a freebsd 10 or 11 jail into a freebsd 9 instance?
1
vote
1answer
120 views

Running ssh from chroot jail in SuSE

I'm trying to make a server that acts as sort of an access point for lots of other machines. I want to give one user jailed access to it so they can ssh to other machines in the network. I've got ...
1
vote
0answers
11 views

Chroot Users to /opt and subdirectories [duplicate]

I'll make this short and hopefully I make sense. Im trying to give a user ssh access, but, he/she must only be able to access /opt and the few subdirectories that live under it. However, here's ...
1
vote
1answer
213 views

Files in folder /run/udev/data

Does someone know, when and how the files in this folder /run/udev/data are generated. I ask because I have a program, which needs udev in jail. But the version in jail is newer (version 208) than ...
0
votes
1answer
203 views

How can I install tomcat8 using openjdk8 in a FreeBSD jail?

I have a FreeBSD 10.1 machine. I want to install tomcat8 and openjdk8 in a jail. This jail will only be used for few web application, and I do not want to install the ports collection, nor the full ...
0
votes
0answers
68 views

fail2ban stops logging after some time (3-4 days)

I've noticed that whenever I want to see fail2ban logs after 3 or 4 days of being working, it compresses the logs to .gz which Im fine with that: -rw-r--r--. 1 root root 90034 May 1 12:49 ...
0
votes
1answer
4k views

How to remove a (plugin) jail from FreeNAS

I'm running FreeNAS (v9.2.1.9) as a file and media server and have several jails installed, some of them as plugin jails others as "standard" jails. After I had replaced one of the plugin jails by a ...
0
votes
0answers
58 views

FreeBSD php (cli) in host system with application jail

Case: platform with FreeBSD (10.1) on the host system and multiple application jails. One of the important goals for multiple jail - multiple php versions. Users have access only in host system. ...
0
votes
0answers
316 views

How to use binaries in jailshell?

I'm offering jailshell (on CentOS- whm) access to someone in order to use the folder sync tool called Unison (Some sort of bidirectional rsync) That's for the background. Unison is installed, as ...
0
votes
1answer
380 views

FreeBSD 10: Do I need jails?

I'm in the process of setting up a FreeBSD 10 server with just some services on a KVM server: NGINX webserver w PHP-FPM 2 domains, 3 subdomains Mailserver 3 Email addresses MySQL (or other) ...
6
votes
3answers
611 views

How to jail a fastcgi server (or a web-proxied server)?

If you have a web-server (e.g. nginx) often you use a fast-cgi server or another application-http-server for dynamic content. That means in both cases you have a nice process separation between the ...
2
votes
1answer
145 views

Update jails FreeBSD in silent mode

What if I want to add all process to the cron? Is there silent way to upgrade jail? After these steps: # make buildworld # make installworld DESTDIR=/jails/somejail It comes time to: # ...
1
vote
1answer
121 views

Jail in chroot in debian 7.5 - Privileges Separation problem

I'm trying to create a jail for a user in my server. Let's call the user "juser". What do I want to achieve? I want an ssh user to be jailed in his home folder and not have any access (whatsoever) on ...
1
vote
1answer
129 views

How do I know if I'm in a jail, container, snapshot, etc. environment? [duplicate]

I received a machine (Ubuntu 12.04 server) from a coworker when he left the company. I created my own user as sudo/admin and used the machine for months via SSH. After rebooting for the first time ...
5
votes
2answers
961 views

How can I use Skype with lxc?

Under Scientific-linux? https://en.wikipedia.org/wiki/LXC I just want to separate Skype, because I don't trust it. We are using it only to call/chat with people, no file transfers!
10
votes
1answer
602 views

Linux: Is there handy way to exec a program binding it to IP-address of choice?

In FreeBSD 4.9 it was very easy to accomplish with just a single command like jail [-u username] path hostname ip-number command if path was / you had running just the same program as usual but ...
2
votes
1answer
38 views

Absolutely jail a user with minimum IP, file, & command rights

I am trying to secure a custom application as much as possible from outside tampering. I've seen many pages on jailing a user, but they usually include many exceptions, and I want to lock down this ...
6
votes
3answers
520 views

How does bash know how it is being invoked?

I've installed jailkit on Ubuntu 12.04 and I have set up a user's shell to /bin/bash - but when it is invoked it runs /etc/bash.bashrc instead of /etc/profile If you haven't used jailkit before ...
22
votes
3answers
8k views

How to “jail” a process without being root?

Were I root, I could simply create a dummy user/group, set file permissions accordingly and execute the process as that user. However I am not, so is there any way to achieve this without being root?
4
votes
4answers
300 views

“Virtual” shell, ie. jailing an user inside a process after the (SSH) login

The title might not say much about the issue at hand so let me get straight to the point. Let's assume I have a casual user who can log in to the system via SSH into a bash shell. I also have a PHP ...
3
votes
1answer
601 views

What does 'mergemaster' do that 'make distribution' doesn't?

After calling make installworld (or make world), there are two ways of updating source files in the new world: calling mergemaster -p or make distribution. I know that mergemaster calls make ...
5
votes
3answers
1k views

Running Viber as another user while using “mine” X Server's microphine and speakers

I run Fedora with GNOME and recently installed Viber for linux. It's very good and all is working just fine. As Viber is not open-source software, I decided to run it as another user to make sure ...
2
votes
0answers
713 views

How to configure Sendmail in a jail to get correct FQDN?

I am building a mail server using FreeBSD 9.1-RELEASE with a jail. On the direct OS, all what I have to do was only adding my domain name to /etc/mail/local-host-names file. Anyway I wanted to run ...
1
vote
1answer
4k views

Jail only a specific user with vsftpd

I'm using both Redhat and CentOS. When I do followings: # vi /etc/vsftpd/vsftpd.conf chroot_local_user=YES # service vsftpd restart Then all users are jailed in their home directory. How can I ...
2
votes
1answer
2k views

How to achieve the effect of chroot in userspace in Linux (without being root)?

The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
1
vote
1answer
282 views

the right way to synchronise sources on freebsd

Update: I'm happy to report @dartonw 's answer worked and I went and did a checkout and then buildworld and it built successfully in about 6 hours. So I've been having some issues with jails in ...
5
votes
1answer
4k views

How can I mount a directory of the host system for use inside a FreeBSD jail?

I am performing the following on FreeBSD 9.0-STABLE: mount_nullfs /foo /jail/foo After that, from within the host system, the mount works. So this works: touch /foo/bar && ls /jail/foo/bar ...
0
votes
0answers
345 views

PC BSD Warden network interface

The documentation for PC BSD's Warden mentions that the configuration of the right network interface is crucial. However, it doesn't say what the "right" interface is. This may sound like a stupid ...