The jail tag has no wiki summary.
-1
votes
0answers
17 views
How to set up Tiered Chroot jails?
So here's what is going on. I have a system I want to set up SFTP jails on. Simple enough, I got it done easily. The issue I am running into now is that I want to be able to have a user SFTP jailed to ...
-1
votes
0answers
11 views
Execute command with Jailkit
So I created a jail at /opt/jail using http://olivier.sessink.nl/jailkit/ - how can I execute a command inside the jail now and get the output as I can do with chroot ?
The simplest command I'd like ...
0
votes
0answers
46 views
Which jailing strategy should I use (Debian 7 Wheezy/kFreeBSD) [closed]
I'm running on Debian 7/kFreeBSD and I'm building a small scale server for many users and services. I would like to ask you for an advice about setting up jails: should I create one jail per service ...
5
votes
4answers
205 views
Difference between chroot and jail
I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the ...
0
votes
1answer
24 views
Changing WebServer to use BSD Jails
I'm thinking of changing my web server so that Apache (and all of django web apps) run inside of a jail rather then on my host machine. I want to make this change for two reasons, the first and ...
5
votes
1answer
187 views
FreeBSD Jail with Loopback IP, IPFW, and natd - Outbound connections fail from jail
I've got a FreeBSD 9.0 server. It has several jails, but they all have this same issue. They can not initiate connections to the outside world. They communicate with each other and the host fine.
...
2
votes
3answers
89 views
Shared authentication across FreeBSD Jails
I am using FreeBSD with ZFS to run several jails. For jail management I'm using ezjail, and I have a template jail which I use for provisioning.
I want to share passwd, groups, and authentication ...
-1
votes
1answer
52 views
Server Security: FTP and System Users
I'd be happy to get an advice about handling system users and ftp users on a Linux server (Ubuntu). Just want to do it right way.
I have a sysUser.sysGroup and created virtual ftpUser.ftpGroup for ...
0
votes
0answers
23 views
How secure is the SOAP API, between servers running in JAIL?
We where working on a project in order to link our own 2 different websites.
Then we (my dept. and IT) decided for one of it to take over its others content and user data. (The "master" site had ...
4
votes
2answers
200 views
Migrate FreeBSD jail
I need to create a freebsd jail for web hosting, that will be frequently migrated between hosts.
How feasible is it? Can I use domains instead of IPs? can I use wildcard IPs?
I need this to ...
-3
votes
2answers
111 views
Simplest way to jail users for git [closed]
I'd like to create a couple user accounts on my server such that the users can check out a specific git repository. Ideally, the user would not be able to gain access to a shell or copy any files ...
2
votes
3answers
402 views
SFTP access akin to jailed shell
I have a question about creating a user with sort of jailed shell access (actually all is required of this user is an sftp access to one particular directory).
Scenario is as follows - I have an ...
0
votes
1answer
79 views
How to configure jailed apache to be accessible on the network
I have jailed apache on freebsd on a private network with ip address 192.168.100.174, I have another apache server running on the host but it is configured to listen on its other IP addresses but ...
1
vote
2answers
433 views
How to connect freebsd Jail to network
So recently I successfully installed and configured a freebsd jail and I would like to install
software within my jail but I cannot connect to the network. I'm trying to setup an apache+php+mysql ...
0
votes
1answer
113 views
how limit php script to access parent host directory
I've a debian linux server with apache2.2 & php5 installed.
I've created many virtual hosts on my apache server, each virtual host has a separate root directory & php is enabled for all of ...
1
vote
0answers
97 views
Jail PHP to OpenBasedir or Document Root Debian
I have a VServer running with Debian Squeeze Debian Squeeze / Apache2 / FastCGI / MySQL / Froxlor. The administration of Customers, Domains and FTP Accounts are performed using Froxlor.
Following ...
0
votes
1answer
582 views
SFTP: file symlinks in a jailed (chrooted) directory
I'm trying to set up sftp so that a few trusted people can access/edit/create some files. I have jailed a user into their home directory (/home/name) but have run into a problem. I want for them to ...
0
votes
2answers
68 views
Crossplatform “jail” for an application
We currently have a variety of systems (Linux, Solarix, *BSD, HP-UX ...) on which we are not allowed to install anything into / (but I have root access. That's strange, I know). But we'd like to run ...
2
votes
2answers
253 views
How to map authenticated Nginx users to their own directory?
I am writing a social networking site in C and serving it all up with Nginx. How can I make it so that authenticated users go to their own directory -ONLY- where a user-specific index.html resides. ...
2
votes
4answers
1k views
OpenSSH anything like 'internal-sftp' but for SCP?
I'm running Debian stable and I'm looking to establish the following environment for users in my 'sftponly' group:
jailed
can transfer with SFTP
can transfer with SCP
cannot login interactively with ...
0
votes
2answers
878 views
Restricting User Access in Debian Squeeze
I've been contemplating ways to restrict user access to their own directories, not allowing them to navigate above their own user directory.
I'm using SFTP, and don't want to install regular FTP ...
0
votes
0answers
26 views
CHROOT Jail But Allow Root Full Access [duplicate]
Possible Duplicate:
How to setup a proper SFTP user in linux?
I was wondering if it was possible to have a chroot jail for sftp, but still allow full SFTP and SSH for root. I can't seem to ...
0
votes
0answers
57 views
What system files need to be in a jailed environment for php-fpm to function properly?
I'm using php5-fpm and have separate pools and chroot locations for each domain hosted with nginx. However, I know that some system files need to be directly in the jail, but which ones do I need?
I ...
0
votes
2answers
284 views
chroot'ing Apache to prevent shell scripts?
Recently I'm being told that a user has my system 'shelled.' While there hasn't been any unusual activity or errors in Apache error log, etc.. I'd rather be safe than sorry.
So: If I run chroot ...
1
vote
2answers
267 views
FreeBSD jails access
I want to run an application inside jail so that allowed uses can only connect to the jailed env (application) and nothing else on my box.
But they need to be able to connect to the jail over the ...
5
votes
2answers
2k views
use LXC under heavier virtualization (Xen, KVM,Hyper-V,VMVare)
Is it possible to use LXC under heavier virtualization (Xen DomU,KVM,Hyper-V,VMVare) ? I would like to use it as security (isolation) tool, the ability to limit resource consumption is not priority ...
2
votes
1answer
185 views
MySQL performance on FreeBSD after moving db files from /var
I was running out of space on /var so I moved my db dir to /usr and noticed a significate decrease in performance. In addition I noticed that performance is much slower as well under any Jailed ...
1
vote
1answer
1k views
SFTP - couldnt read packet: connection reset py peer
I have setup SFTP on our development box and would like to jail users into the /var/www/project folder
I have added the following to /etc/ssh/sshd_config
Match Group developers
ChrootDirectory ...
4
votes
1answer
447 views
Building NanoBSD inside a jail
I'm trying to setup a jail to enable building a NanoBSD image. It's actually a jail on top of a NanoBSD install.
The problem I have is that I'm unable to mount the md device in order to do the 'build ...
2
votes
1answer
175 views
FreeBSD Jail Authentication and Commands
I have setup a jail on FreeBSD-8.2 following the manual. After the setup, I copied these files rc.conf, /etc/passwd from base to jail. And this is what I did in order:
jexec id passwd (to change the ...
2
votes
0answers
55 views
Simplest & Easy Way To Jail Users
I Need Simplest & Easy Way To Jail Users in there home directories
I am looking tools like " jailkit & MySecureShell "
Or
simple configuration to jailing users (with full help or some good ...
0
votes
4answers
1k views
Prevent rssh users from leaving their jail directories
I'm attempting to use rssh to jail users strictly to their /home/user/public_html dirctories.
I got it to work where an account can SFTP into the system successfully on a test server, but once I login ...
0
votes
1answer
689 views
Chroot jail of Nginx and php
I'm hosting multiple websites on one VPS, and want to chroot each website, eg. /chroot/website1 /chroot/website2
I'm using makejail, which is a highlevel tool, for creating the jails, and copying the ...
1
vote
1answer
201 views
SFTP jail & Keeping file ownership the same / File owner per folder
I want to setup a jailed SFTP account for a subfolder of another user's home folder, but want the owner of everything in that subfolder to stay the same, including new files and folders uploaded and ...
2
votes
1answer
543 views
sftp jail user. error in winscp
I have a configuration where specific users can log-in only in sftp and not ssh.
Also the users are jailed in specific directories.
Lets say the user name is stefanos and his rooted directory is ...
31
votes
1answer
1k views
I am going to chop the FreeBSD automounter into little pieces and boil them in oil
I am trying to expose a hierarchy of home directories to a number of FreeBSD jails. The home directories are configured such that each is a unique ZFS dataset. The jails are used for development ...
5
votes
1answer
2k views
Is there a tool for managing FreeBSD jails that knows about ZFS?
ZFS under FreeBSD lets one assign filesystems to a jail, such that an account in the jail with the appropriate privileges can access the filesystem, create new subordinate filesystems, and so forth. ...
2
votes
1answer
417 views
Debian: ip/network changes within chroot/jail
I've Debian Squeeze running and setup a chroot environment (/jail) with debootstrap.
As seen in a tutorial, I mounted the following:
proc on /jail/proc type proc (rw)
devpts on /jail/dev/pts type ...
4
votes
2answers
4k views
How to Create Jailed Users?
My servers run CentOS: Nginx + PHP-FPM (PHP via Fast-CGI). Every site is on its own VirtualHost.
Currently both Nginx and PHP-FPM run under root. I know this is bad practice, and there is no reason ...
1
vote
1answer
173 views
Security implications of mount --bind in a chroot environment
Assume you have a chroot environment where you need a resource - an application or a library - which resides on the host (external to the chroot).
Which are the security implications (if any) of ...
0
votes
1answer
559 views
uWSGI touch-reload feature not working with 100% CPU
On my development box, I have configured uWSGI to reload every time a file gets touched (using the --touch-reload command line argument).
When I specify a non-existent file, I get a warning in the ...
2
votes
1answer
231 views
What are the security implications of using allow.sysvipc in a FreeBSD jail
The man page for jail says that allow.sysvipc enables "System V primitives [to] share a single namespace across the host and jail environments..." thus "... processes within a jail would be able to ...
0
votes
1answer
360 views
using ssh why do sftp directories need to be world readable?
I added the below to sshd_config, when i chmod 770 the user folder i get this error? Why? how can i make the folder only readable to the user or group? the owner currently is root and the group is ...
2
votes
1answer
412 views
jailkit chroot terminates ssh login
I've done my very best to follow these instructions to create a chroot shell. But the connection get's terminated every time I try to login via ssh for my new chrooted user.
I start my ssh terminal, ...
1
vote
2answers
130 views
System Security (PHP and others)
I have a few important documents that I keep owned by www-data (apache's user) in my /var/www/ folder. They have to be www-data because PHP will write to them at times.
I also have users who access ...
1
vote
2answers
769 views
FreeBSD - Can't access jail from SSH
I need your help for solving an SSH+FreeBSD+jails authentication issue.
I've (almost) successfully set up a jailed environment on my FreeBSD 8.2 box.
My FreeBSD host has 2 network interfaces: ...
0
votes
3answers
362 views
Jail users in a directory
I have a vps running debian OS and would like to create user accounts on it.
I want it so that when the user logs in with sftp, everything in var appears to be their home directory and they cannot ...
1
vote
1answer
448 views
Is it possible to run dhcpd3 as non-root user in a chroot jail?
I would like to run dhcpd3 from a chroot jail on Debian Lenny. At the moment, I can run it as root from my jail.
Now I want to do this as non-root user (as "-u blah -t /path/to/jail" Bind option).
...
0
votes
1answer
203 views
How can i acess a shell of a jail on FreeBSD?
I have access to a a previously set up FreeBSD box with a number of jails on it. One of the jails is an SQL server and does not have ssh enabled on it.
How can i gain access to a shell on that sql ...
0
votes
2answers
145 views
can I jail ssh for more that one directory?
I have working jail ssh to one directory.
I would love to give r/w access for the jail ssh user to few directories. For example
/tmp/user
/home/user
/srv/www/user
is that possible?
