Questions tagged [jails]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
32 views

Resolve local webserver to public domain

Is there a way to forward traffic on mydomain.com to local web server hosted on virtual machine ( bhyve )? Let's say my local machine has local IP - 1.1.1.1 And my registered domain in X hosting ...
2
votes
1answer
115 views

man returns execve: No such file or directory in chroot jail

I created a chroot jail and copied multiple binaries and their corresponding libraries to the relevant subdirectories. Example: cp -v /usr/bin/edit /home/jail/usr/bin ldd /usr/bin/edit linux-...
0
votes
1answer
40 views

What is the `/` command displayed by htop?

I’m running FreeBSD 12.1-RELEASE on my home server. From time to time, the server’s HDDs thrash for hours on end, even though the server itself should be idle. (I have no cron jobs scheduled, and I ...
1
vote
0answers
34 views

Confusion about FreeBSD jail being up to date (or not)

I'm new to FreeBSD system administration and I'm a little confused about keeping jails up to date. Different commands seem to give conflicting information: After sudo pkg -j 18 upgrade, re-running ...
1
vote
1answer
302 views

How do I access my jail by hostname on a home network?

I'm using FreeNAS (FreeBSD), and I've created a jail, and I've given the jail a hostname, and I can access the jail via IP address, but I can't access the jail by it's hostname. (within my home ...
0
votes
1answer
44 views

Ezjail network in aws ec2 instance

I am trying to connect a jail to the internet in a aws ec2 instance. I am able to create the jail and execute a console inside, the problem is that the jail does not have any connection to the outside....
1
vote
0answers
31 views

mv -v , but only when something happens

For maintenance reasons, I have a cron job like mv -vn folderA/* folderB However every time it is executed I got an email, even if nothing is moved, can this be set to distinguish between cases? (...
0
votes
1answer
833 views

Upgrading base jail with iocage fails on FreeBSD/FreeNAS

I have tried to upgrade a few 11.3 base jails to 11.4 on my FreeNAS server running FreeBSD 11.3. I used: iocage upgrade -r 11.4-RELEASE my-jail-name Some of the jails were failing with etcupdate ...
-2
votes
2answers
98 views

SFTP jail for the root user?

So While I've been looking into ways of locking down users and locking them down into jails. I've came across an interesting question that I haven't seen answered anywhere. How can one posses the ...
2
votes
0answers
372 views

How can I enable/disable a jail using fail2ban?

We can add a line like this below a specific jail in the jail.local file, and control the jail: enabled = true/false But I think there should be a command to do this, as we've got bunch of "set&...
2
votes
1answer
852 views

Fail2ban multiple actions

I am trying to create a jail for fail2ban, where upon a regex match I want to block the source IP from reaching either port 80 or 443 on my server. I've tried variations of this: action = iptables[...
0
votes
1answer
127 views

Program run though chroot jail gives error about encoding?

I'm new to chroot jails; so far I've setup bash using this tutorial, and I've been able to login with the user through ssh secured with a public key. The SSH configuration takes care of running the ...
0
votes
1answer
316 views

ldd and chroot jails when lib64 points to lib?

I'm following this tutorial and on step 2 they look up a bunch of dependency libraries for bash. (I'm assuming you would need to do this for any command that you wish the chroot jail user that is ...
1
vote
1answer
379 views

how can I manage services running in freebsd jail

I've inherited some systems that run on freebsd and inside jails. Basically the services running are old versions of qmail, spamd, dovecot, etc. None of the versions are up to date or even ...
0
votes
1answer
769 views

Differences between LXC, KVM and Firejail

Also, what is the closest thing to FreeBSD jails in GNU/Linux?
1
vote
1answer
605 views

First time installing TinyDNS as a service in a FreeBSD jail - how to do it?

I'm using FreeBSD 11.2 at the moment (likely to move to 12 in a while). I need a tiny authoritative-only DNS server (no lookup or caching needed, under 10 domains and under 10 queries/hr, almost no ...
3
votes
1answer
565 views

Why does `chroot` operation result in error: "bash: /root/.bashrc: Permission denied"?

Why does chroot operation result in error: "bash: /root/.bashrc: Permission denied"? I've been testing chroot for learning purposes, and have encountered the following error, when executing /bin/bash:...
0
votes
0answers
427 views

Restricted shell within docker container

Some context for my question: I am working on a pty NodeJS server running in docker where I want to provide users connecting to the shell an isolated environment where they can play around with ...
1
vote
1answer
84 views

Multi-jail /var separation

I'm setting up multiple jails in FreeBSD to serve dynamic websites. The host environment has a webserver that dispatches connection based on HTTP Host header, and each jail has a /var/lib/www-db ...
0
votes
0answers
48 views

Securing an open FTP on FreeBSD for visitor wifi speed testing?

I'd like to add a really simple local FTP server to my FreeBSD system, to allow guests to do wifi speed testing. Because of the use, I don't need more than very basic functionality - anon R/W to a ...
1
vote
0answers
30 views

Can I limit a process's access to specified files and stdout only without root?

I want to setup a server for students to upload C code. The server compiles C code, run the binary and shows output to students. Now I am having security concern. Students can upload any code, but I ...
1
vote
2answers
420 views

What is the reason FreeBSD jails don't get the entropy pool

I've noticed that the FreeBSD script that generates entropy, bails out if it finds it itself is running from within a jail. # uname -srm ## notice: install of mfsBSD (https://mfsbsd.vx.sk) FreeBSD ...
0
votes
1answer
233 views

Running Tor service in the jail environment

I want to torify my FreeBSD old machine purposed to mainly darknet activities. Questions: Should I worry about these errors during creating jail? Warning: Some services already seem to be listening ...
1
vote
1answer
1k views

How to use Jailkit Jail Manager in Virtualmin to restrict users

How to use Jailkit Jail Manager in Virtualmin (Webmin 1.892) to restrict users in their homes including virtual website and all services running under user? I am setting up small website hosting ...
2
votes
1answer
1k views

Is a Chroot Jail for SSH *and* SFTP?

I'm trying to setup a chroot jail, but I'm not sure how to make this work in SSH and SFTP. A quick question, will something like this work for both SSH and SFTP or just SSH? If it doesn't work for ...
2
votes
1answer
77 views

Can the contents of a FreeBSD jail be installed as the main OS?

Is it conceptually possible to take a FreeBSD jail and copy the contents to my root filesystem and expect it to boot up? Note that because the jail doesn't have a kernel, I will have to copy that ...
1
vote
2answers
2k views

chroot an user to more than one directory in different locations

I would like to know how I can constraint a user to only be able to access and have RWX permissions to directories like /etc/httpd, /etc/php and /var/www/html as well as its own home directory. Also ...
0
votes
1answer
590 views

Proper way to jail user so shell doesn't immediately close

Trying to use jailkit on Centos7. I've installed by source and also used RPM's at http://dries.eu/rpms/jailkit/jailkit, and get the same results. I am primarily following https://olivier.sessink.nl/...
0
votes
1answer
229 views

Why will shell automatically close for jailed user with 777 home?

Jailed a user using https://olivier.sessink.nl/jailkit/ on Centos7 sudo jk_jailuser -m -j /home/jail -v -s /bin/bash testing sudo jk_cp -v -f /home/jail /bin/bash Then made /home/jail/home/testing ...
2
votes
1answer
4k views

How to change the default (binary) python version in a FreeBSD jail?

In a jail, I have installed python3.6 along python3.4. Both were installed using pkg install, no ports. I want to keep the 3.4 version for some time, but set the 3.6 as default. Answers found in ...
1
vote
1answer
166 views

Create a second Jail on FreeBSD?

I recently created a Jail on FreeBSD 11 Release, I used the steps listed on the ezjail section of the handbook The handbook, specifically: echo cloned_interfaces="lo1" >> /etc/rc.conf service ...
1
vote
0answers
84 views

Problem in Bind with 4 views

I have Bind server installed on FreeBSD Jails. I have master and two slaves. And I have 4 views for different locations. When I add some record on master zone and type rndc reload I see that all 4 ...
4
votes
1answer
497 views

How can I run a program with limited permissions

I noticed that a lot of my programs run under the same user like (firefox,chromium,steam,etc...) and therefore should have the same permissions as this user, but I would prefer to limit their accesses....
0
votes
1answer
962 views

How to run firejail as root?

How can I run firejail as a root user? # firejail --seccomp firefox Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/...
4
votes
1answer
4k views

ssh in chrooted jail doesn't work because of /dev/null operation not supported

I am trying to set up a ssh-chroot jail on one of my NAS servers. The system runs on NAS4Free (which is based on nanobsd). The user should be able to run only one command, which is a bash-script that ...
1
vote
0answers
113 views

Problem with MySQL timezone

I have installed MySQL,version 5.6.16.My OS is FreeBSD,version is 9.3.MySQL installed on jail.When I check date I see Thu Nov 17 15:22:14 AMT 2016,I see this output also on the system.In MySQL,when I ...
2
votes
1answer
838 views

Complete isolation in Linux sandboxing

Applications on iOS (and perhaps the ones that are sandboxed on OS X) are confined to a virtual root filesystem that only has the files and directories specific to the application. The root seen by an ...
3
votes
1answer
1k views

Freebsd: pf firewall doesn't work on restart

I'm running FreeBSD 10.3 p4 and observed some strange behavior When restarting the machine pf starts due to /etc/rc.conf entry # JAILS cloned_interfaces="${cloned_interfaces} lo1" gateway_enable="...
1
vote
1answer
360 views

Globally writable files and user-based process jailing

I want to be able to generically pick a certain executable (potentially malicious) x and run it (from an admin account) with write access restricted to certain directories (dynamically deduced) "${...
5
votes
2answers
2k views

Accessing ports on public IP from within a FreeBSD jail

In a FreeBSD 10 setup, I have a jail running the publicly accessible nginx web server and another jail for the Java backend server based on Jetty. Each jail has its own internal IP address 127.0.1.x ...
4
votes
1answer
2k views

How to change Squid service UID in FreeBSD?

Strangely enough, it appears that Squid cannot start if the squid user is not affected to the UID 100. When trying to use another PID, the service systematically fails to start with the following ...
1
vote
1answer
312 views

FreeBSD - UFS equivalent of ZFS command

I'm trying to configure jails with this tutorial. Since I don't want to use ZFS, could anyone tell me the UFS equivalent of zfs create -o mountpoint=/local/jails zpool/jails chmod 700 /local/jails &...
1
vote
1answer
2k views

ezjail: update problems

I'm having problems whenever I try to update my ezjail baseball on FreeSDB 10. I'm on FreeBSD 10.2-RELEASE-p11 and ezjail v3.4.2 The jails show the right version inside but the update progress doesn'...
3
votes
1answer
1k views

FreeBSD jails - Nginx, PHP-FPM, Wordpress - Share folder between jails (read-only)

Question I want to separate PHP (PHP-FPM) and Nginx into different jails. One jail with Nginx, and one with PHP-FPM / PHP / Wordpress. Nginx is good at serving static assets, so I would like to ...
2
votes
1answer
2k views

FreeBSD: adding ip alias to interface breaks network on primary ip

I am trying to add an alias to my network card (I would like to use jails) on my FreeBSD box. It is running version 10.2-RELEASE-p7 (generic amd64 kernel). The machine is running in a Hyper-V virtual ...
2
votes
1answer
308 views

Can I jail an older 32-bit FreeBSD on a (current) 64-bit FreeBSD?

Is it possible to jail an older 32-bit FreeBSD, such as 6.4 or 8.4 in a 64-bit FreeBSD 10.2? I'll also appreciate pointers and explanations on how to accomplish this and information on what ...
1
vote
2answers
489 views

How is OpenSSH sftp jail/chroot working?

This question is actually too broad... What I really want to know is whether or not it actually chroots and, if so, how a SSH user deamon[1] can be launched in that jail in spite of the obvious lack ...
2
votes
1answer
1k views

Is there a way to isolate a running program from the rest of a Linux system?

First of all, I know about virtualisation and containers. I'm sure "he wants containers" is what popped in your mind. (Don't deny it!) However containers are like chroot: if you want to execute bash ...
2
votes
1answer
3k views

FreeBSD - No internet connection inside jail

I am currently trying to set up a server on FreeBSD. I want to create jails with ezjails according to the handbook. I am following the example to install BIND inside a jail but I am stuck at the ...
0
votes
1answer
797 views

Logout from jail

I'm trying to use FreeNAS on my office along with Syncthing, and some things are giving me headache. FreeNAS installed Syncthing as a jail, and I did the jexec command to login into the jail, but now ...