Jails improve on the concept of the traditional chroot environment in several ways. In a traditional chroot environment, processes are only limited in the part of the file system they can access.

learn more… | top users | synonyms

0
votes
1answer
31 views

DNS lookup to localhost gives network error

I am running a recursive DNS server on Unbound in a jail on FreeBSD with pf as a firewall. Running drill @xxx.xxx.xxx.xxx example.com (where xxx.xxx.xxx.xxx is the servers IP) on my local machine ...
0
votes
0answers
18 views

How to diagnose netstat: no namelist

I had to replace an NIC on my HP Proliant Microserver, running FreeNAS 9.3 In my crashplan jail, I now get "netstat: no namelist" as a response when I execute the netstat command. How to I diagnose ...
2
votes
0answers
26 views

gethostbyname failure and network timeouts in jail

I have a FreeBSD DigitalOcean droplet in which I followed this guide exactly for setting up a jail. The problem is I cannot get reliable network connectivity inside the jail. Doing curl ...
0
votes
0answers
24 views

smtp sending mail as “Charlie &”

I'm trying to use ssmtp to send mail from my jails to the mail hub in one of them. However, the from name isn't properly being renamed. The & isn't being replaced with root so I'm getting mails ...
3
votes
1answer
163 views

Should Postfix run chrooted if it already is in it a FreeBSD jail?

I'm running Postfix together with Dovecot and a few milters in a FreeBSD jail. Is there a significant security gain when I run SMTP and SMTPD daemons chrooted as well?
0
votes
1answer
62 views

FreeBSD & Jails: Send mail through Postfix in Jail

I have FreeBSD 10.2 and I'm using several Jails, one of them has Postfix installed. I want my other jails and my host system to use the local Postfix installation in the Jail. They should use ...
0
votes
0answers
24 views

FreeNAS Jail - Mount nullfs at jail boot

I have a need to mount using nullfs for a jail in FreeNAS and want this mount to be automatically set up at boot of the jail. I have not had luck finding a clean documented way of doing this that ...
0
votes
1answer
55 views

ezjail: “partially completed upgrade”

I just updated FreeBSD to 10.2 and after trying to update my jails through ezjail I get the following : ezjail-admin update -u Looking up update.FreeBSD.org mirrors... 5 mirrors found. Fetching ...
1
vote
1answer
40 views

What are the correct Linux permissions inside chroot jail with userspec

I am trying to setup a chroot jail, then I did: which binary ldd /bin/binary Then I did: cp /lib64/{libs} $jail/lib64 cp /usr/lib64/{libs} $jail/usr/lib64 PS: During this setup, I discovered ...
1
vote
2answers
99 views

Shutting down host from within jail

I've created a jail with ssh using Finch-Freebsd on a NAS4FREE and added a local non super user to access the jail via ssh. I want to be able to grant this user limited shell access specifically to ...
0
votes
1answer
52 views

apache / mysql unable to connect jails with PF firewall

I have setup two jail environments on FreeBSD11 root@ns312773:/etc # jls JID IP Address Hostname Path 1 10.6.6.6 www ...
0
votes
0answers
93 views

configure pf.conf to NAT http / https to docker container running nginx

I have setup FreeBSD 11-CURRENT runing docker in a jailed environment as per https://wiki.freebsd.org/Docker When trying to deploy NGINX as per ...
0
votes
1answer
51 views

Redirecting Public IPs to jails

My plan is to set up a server where I have several jails. Currently, I am planning on running three of them: a webserver, an owncloud server and a Teamspeak 3 server. I got it running so far that I ...
0
votes
1answer
119 views

What is the best method of installing programs into a chroot / jail?

On a Debian based system... I have created a minimal chroot/jail using a script similar to the one at https://github.com/pmenhart/make_chroot_jail/blob/master/make_chroot_jail.sh with the goal of ...
0
votes
1answer
107 views

mongod bind_ip bind to wrong ip

I'm trying to setup a mongodb in a FreeBSD jail. I found in the documetation that I can set the bind_ip to 127.0.0.1 to allow only access from localhost. But when I check with sockstats it's bound to ...
0
votes
1answer
80 views

FreeBSD jail with ezjail fails to log in with non root users

I just installed a fresh new FreeBSD 10.1 (FreeBSD 10.1-RELEASE-p9) and set up a jail with ezjail (ezjail-admin v3.3). Inside the jail I created a new user: Login: test Password: * Uid [#]: 1001 Gid ...
0
votes
0answers
65 views

Git server in jail: working directory in different jail

I'm setting up a FreeBSD server with five jails. Some of them are web servers with web apps. Some of those apps should be updated using git. I was now thinking about running the git server in his own ...
0
votes
1answer
206 views

Sending syslog from jail to host fails

I'm trying to send logs from a jail to the host system on FreeBSD 10. I think everything is setup correctly but I can't get it working. Sending logs directly from Nginx 1.7 works but not sending ...
2
votes
1answer
135 views

Nginx: Tags in Syslog output on wrong position

I'm trying to output the logs of several Nginx servers in FreeBSD jails to the jails' host. I'm using FreeBSD 10 syslog and Nginx 1.7.10. In Nginx (in this case the hostname is web) I have set: ...
0
votes
1answer
53 views

Move a Sftp User in a Subdirectory of his Jail

I've a question concerning the Jail explained later: User to be jailed: foo Jail Directory: /mnt/foo-jail Home directory of foo: /mnt/foo-jail/foo-home Everything is ok. Jail is up and the user is ...
0
votes
1answer
411 views

ports in freebsd jail fetching but not updating

I've created a jail to host my webserver/blog, but when attempting to build any port, I consistently get the message "portsnap: Directory is not writable: /usr/ports". Attached is a screen capture ...
0
votes
1answer
3k views

Fail2ban MTA=Postfix Setting in Jail Config giving Error

In /etc/fail2ban/jail.local, when I have the MTA setting to Postfix, Fail2Ban is showing an error and is unable to start. [DEFAULT] ignoreip = 127.0.0.1/8 bantime = 1800 ...
5
votes
1answer
3k views

Fail2ban jail.local vs jail.conf

Does jail.local file act as an override to jail.conf or as a replacement to jail.conf? When I was learning about Fail2Ban from tutorials, most of them usually say either to copy jail.conf to ...
0
votes
0answers
1k views

SSH server in a FreeNAS jail is not accessible from the local network

I Have a FreeNAS (not sure which version - the one that uses FreeBSD 9.2) setup with a jail that I use for running various tasks. The jail has SSH service enabled in rc.conf, and I can also see the ...
5
votes
0answers
2k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
0
votes
1answer
215 views

How to keep jailed users from changing directory to parent dirs?

I've chroot users with chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and I'm the only user in the chroot_list file. Other users log in jailed but when they ...
-2
votes
1answer
380 views

MariaDB service won't start on FreeBSD jail

Just set up a dedicated database jail running databases/mariadb55-server and for some reason it won't start on demand nor on boot. Any suggestions? # service mysql-server start Starting mysql. ...
1
vote
1answer
135 views

How do I symlink one directory to a chrooted (jailed) directory?

'm trying to create a folder (directory) for a jailed user on my server that will allow him to access another folder outside of his jail. I'm trying to do this with symlink but all it does is create a ...
0
votes
1answer
158 views

FreeBSD jail and patch-levels

I am a newbie server manager and trying jails. It's too hard to configure it. So I decided to use ezjail utility. It seems working, but I got an issue. When I installed my FreeBSD box, it was ...
0
votes
1answer
103 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
2k views

FreeNAS/FreeBSD: How to access status of ZFS volume from jail?

I am trying to set up NRPE to enable remote Nagios monitoring of a new FreeNAS 0.91 system. I mostly have this working. I can connect and inquire about basic information like number of processes, ...
0
votes
1answer
277 views

Changing WebServer to use BSD Jails

I'm thinking of changing my web server so that Apache (and all of django web apps) run inside of a jail rather then on my host machine. I want to make this change for two reasons, the first and ...
6
votes
1answer
2k views

FreeBSD Jail with Loopback IP, IPFW, and natd - Outbound connections fail from jail

I've got a FreeBSD 9.0 server. It has several jails, but they all have this same issue. They can not initiate connections to the outside world. They communicate with each other and the host fine. ...
-1
votes
1answer
111 views

Server Security: FTP and System Users

I'd be happy to get an advice about handling system users and ftp users on a Linux server (Ubuntu). Just want to do it right way. I have a sysUser.sysGroup and created virtual ftpUser.ftpGroup for ...
2
votes
3answers
720 views

Shared authentication across FreeBSD Jails

I am using FreeBSD with ZFS to run several jails. For jail management I'm using ezjail, and I have a template jail which I use for provisioning. I want to share passwd, groups, and authentication ...
-3
votes
2answers
787 views

Simplest way to jail users for git [closed]

I'd like to create a couple user accounts on my server such that the users can check out a specific git repository. Ideally, the user would not be able to gain access to a shell or copy any files ...
0
votes
1answer
434 views

How to configure jailed apache to be accessible on the network

I have jailed apache on freebsd on a private network with ip address 192.168.100.174, I have another apache server running on the host but it is configured to listen on its other IP addresses but ...
1
vote
2answers
5k views

How to connect FreeBSD Jail to network

So recently I successfully installed and configured a freebsd jail and I would like to install software within my jail but I cannot connect to the network. I'm trying to setup an apache+php+mysql ...
0
votes
2answers
333 views

how limit php script to access parent host directory

I've a debian linux server with apache2.2 & php5 installed. I've created many virtual hosts on my apache server, each virtual host has a separate root directory & php is enabled for all of ...
2
votes
0answers
321 views

Jail PHP to OpenBasedir or Document Root Debian

I have a VServer running with Debian Squeeze Debian Squeeze / Apache2 / FastCGI / MySQL / Froxlor. The administration of Customers, Domains and FTP Accounts are performed using Froxlor. Following ...
4
votes
2answers
932 views

Migrate FreeBSD jail

I need to create a freebsd jail for web hosting, that will be frequently migrated between hosts. How feasible is it? Can I use domains instead of IPs? can I use wildcard IPs? I need this to ...
11
votes
1answer
10k views

SFTP: file symlinks in a jailed (chrooted) directory

I'm trying to set up sftp so that a few trusted people can access/edit/create some files. I have jailed a user into their home directory (/home/name) but have run into a problem. I want for them to ...
0
votes
2answers
92 views

Crossplatform “jail” for an application

We currently have a variety of systems (Linux, Solarix, *BSD, HP-UX ...) on which we are not allowed to install anything into / (but I have root access. That's strange, I know). But we'd like to run ...
10
votes
4answers
8k views

OpenSSH anything like 'internal-sftp' but for SCP?

I'm running Debian stable and I'm looking to establish the following environment for users in my 'sftponly' group: jailed can transfer with SFTP can transfer with SCP cannot login interactively with ...
0
votes
2answers
3k views

Restricting User Access in Debian Squeeze

I've been contemplating ways to restrict user access to their own directories, not allowing them to navigate above their own user directory. I'm using SFTP, and don't want to install regular FTP ...
3
votes
2answers
959 views

How to map authenticated Nginx users to their own directory?

I am writing a social networking site in C and serving it all up with Nginx. How can I make it so that authenticated users go to their own directory -ONLY- where a user-specific index.html resides. ...
0
votes
2answers
685 views

chroot'ing Apache to prevent shell scripts?

Recently I'm being told that a user has my system 'shelled.' While there hasn't been any unusual activity or errors in Apache error log, etc.. I'd rather be safe than sorry. So: If I run chroot ...
1
vote
2answers
624 views

FreeBSD jails access

I want to run an application inside jail so that allowed uses can only connect to the jailed env (application) and nothing else on my box. But they need to be able to connect to the jail over the ...
2
votes
1answer
393 views

MySQL performance on FreeBSD after moving db files from /var

I was running out of space on /var so I moved my db dir to /usr and noticed a significate decrease in performance. In addition I noticed that performance is much slower as well under any Jailed ...
2
votes
0answers
73 views

Simplest & Easy Way To Jail Users

I Need Simplest & Easy Way To Jail Users in there home directories I am looking tools like " jailkit & MySecureShell " Or simple configuration to jailing users (with full help or some good ...