The tag has no wiki summary.

learn more… | top users | synonyms

13
votes
3answers
3k views

How to “jail” a process without being root?

Were I root, I could simply create a dummy user/group, set file permissions accordingly and execute the process as that user. However I am not, so is there any way to achieve this without being root?
7
votes
4answers
342 views

How can I safely give a shell to somebody?

I have a question about giving a shell account to somebody. How safe is it? He could read /etc. How can I give a secured shell account that will only restrict the user to some bins and his own home? ...
6
votes
3answers
232 views

How does bash know how it is being invoked?

I've installed jailkit on Ubuntu 12.04 and I have set up a user's shell to /bin/bash - but when it is invoked it runs /etc/bash.bashrc instead of /etc/profile If you haven't used jailkit before ...
5
votes
3answers
424 views

How to jail a fastcgi server (or a web-proxied server)?

If you have a web-server (e.g. nginx) often you use a fast-cgi server or another application-http-server for dynamic content. That means in both cases you have a nice process separation between the ...
4
votes
3answers
518 views

Running Viber as another user while using “mine” X Server's microphine and speakers

I run Fedora with GNOME and recently installed Viber for linux. It's very good and all is working just fine. As Viber is not open-source software, I decided to run it as another user to make sure ...
4
votes
1answer
37 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
4
votes
1answer
757 views

How can I mount a directory of the host system for use inside a FreeBSD jail?

I am performing the following on FreeBSD 9.0-STABLE: mount_nullfs /foo /jail/foo After that, from within the host system, the mount works. So this works: touch /foo/bar && ls /jail/foo/bar ...
3
votes
3answers
177 views

“Virtual” shell, ie. jailing an user inside a process

The title might not say much about the issue at hand so let me get straight to the point. Let's assume I have a casual user who can log in to the system via SSH into a bash shell. I also have a PHP ...
3
votes
2answers
1k views

Is there an easy way to create a FreeBSD rc script?

I have a FreeBSD jail in which I run a server using the command: /usr/sbin/daemon /path/to/script.py At the moment I have to run this command every time I restart the machine and the jail starts. ...
3
votes
1answer
436 views

What does 'mergemaster' do that 'make distribution' doesn't?

After calling make installworld (or make world), there are two ways of updating source files in the new world: calling mergemaster -p or make distribution. I know that megermaster calls make ...
3
votes
1answer
374 views

Network interfaces for Jails

I have been reading over the creation of Jails on FreeBSD, and one stumbling block I have is regarding network interfaces. Say my local router is 10.0.2.1, and the BSD box is 10.0.2.5. I would like ...
3
votes
2answers
222 views

Can LXC be used to jail instances of an installed browser?

Is it possible to use LXC on a desktop system to confine browsers and other pieces of software that have in the past been shown to be prone to certain kinds of exploits. So what I want to achieve is ...
3
votes
2answers
617 views

How to install PostgreSQL 9.3 in FreeBSD jail?

I configured virtual NICS using pf, and a jail for FreeBSD using qjail create pgsql-jail 192.168.0.3. When I tried to install PostgreSQL 9.3 using port collection, it shows strange message at first. ...
2
votes
5answers
2k views

How to completely hide stuff from a user?

I want to let some of my friends access my computer by making them user accounts. They will mostly access my computer by sftp and ssh, but they could also sometimes access it at my home. However I ...
2
votes
1answer
591 views

How to achieve the effect of chroot in userspace in Linux (without being root)?

The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
2
votes
1answer
1k views

enable networking inside a freebsd jail

So I'm mostly a linux newbie itself. Let alone freebsd, so please bear with me. I just need some very basic clues to get this to work. I use FreeBSD 9.1 64-bit from the list here. On my freebsd ...
2
votes
0answers
167 views

How to configure Sendmail in a jail to get correct FQDN?

I am building a mail server using FreeBSD 9.1-RELEASE with a jail. On the direct OS, all what I have to do was only adding my domain name to /etc/mail/local-host-names file. Anyway I wanted to run ...
1
vote
1answer
293 views

Jail only a specific user with vsftpd

I'm using both Redhat and CentOS. When I do followings: # vi /etc/vsftpd/vsftpd.conf chroot_local_user=YES # service vsftpd restart Then all users are jailed in their home directory. How can I ...
1
vote
1answer
181 views

the right way to synchronise sources on freebsd

Update: I'm happy to report @dartonw 's answer worked and I went and did a checkout and then buildworld and it built successfully in about 6 hours. So I've been having some issues with jails in ...
1
vote
1answer
1k views

FreeNAS 9.2: install FreeBSD packages

I have installed FreeNAS 9.2amd64 (based on the same FreeBSD version) on a VirtualBox VM. I created users and pool/volume for my data. In anticipation of installing ...
1
vote
1answer
419 views

How can I use Skype with lxc?

Under Scientific-linux? https://en.wikipedia.org/wiki/LXC I just want to separate Skype, because I don't trust it. We are using it only to call/chat with people, no file transfers!
0
votes
1answer
216 views

SSH minimal rights user - su only [duplicate]

Possible Duplicate: Creating a UNIX account which only executes one command I am trying to setup a user account that only has as minimal rights as possible. The user should be able to log ...
0
votes
0answers
27 views

How to get portage to emerge in a FreeBSD Jail?

I am running FreeNAS 9.2.1.2 which allows you to install a Gentoo jail with a one click install that creates a jail on the Free BSD system. I then tried to run emerge -avuDN world and ran into some ...
0
votes
0answers
192 views

PC BSD Warden network interface

The documentation for PC BSD's Warden mentions that the configuration of the right network interface is crucial. However, it doesn't say what the "right" interface is. This may sound like a stupid ...