Jails improve on the concept of the traditional chroot environment in several ways. In a traditional chroot environment, processes are only limited in the part of the file system they can access.

learn more… | top users | synonyms

0
votes
1answer
22 views

How to disable systemcalls in ftp environment with vsftpd?

I've set up a vsftpd server with local users jailed within their home directories. Anyhow if I connect through a ftp client I can execute systemcalls with the "!" command. How can I configure vsftpd ...
0
votes
0answers
50 views

Jailkit: cannot su to jailed user

As a part of a bigger setup (docker container with safe environment for running python scripts), I need to configure a jailed user. I have looked at different options and decided to try Jailkit. ...
0
votes
1answer
38 views

Recommended way to run CentOS 7 on a host FreeBSD: VM or jailed environment?

I need to deploy either a CentOS VM or a jailed instance on a FreeBSD server (10.3). The solutions devised: - run it through VirtualBox (headless) - use bhyve I thought about a third alternative: ...
0
votes
0answers
20 views

Find Unknown Predicate JailedShell

Well, after months experimenting with ', ", and \" it seems i cant find the right pattern that could generate the correct code for a cron job on a jailed shell. I got this code below works on jailed ...
0
votes
0answers
10 views

ezjail-admin adds a faulty path to repo url when installing base.txz

today I've burned my brains trying to solve this and decided to post here. Here the problem: I have a local test freebsd 10.2 server and installed ezjail, but when I try to run ezjail-admin install ...
0
votes
0answers
65 views

Can not start OpenVpn service within a FreeBSd Jail

Recentrly I've been fiddling with my FreeBSD VPS. I have it installed with FBSD 10.3, I created a jail with ezjail and installed openvpn from ports following the guide in http://bit.ly/1T6qg4G and ...
2
votes
2answers
59 views

gethostbyname failure and network timeouts in jail

I have a FreeBSD DigitalOcean droplet in which I followed this guide exactly for setting up a jail. The problem is I cannot get reliable network connectivity inside the jail. Doing curl https://www....
0
votes
1answer
159 views

DNS lookup to localhost gives network error

I am running a recursive DNS server on Unbound in a jail on FreeBSD with pf as a firewall. Running drill @xxx.xxx.xxx.xxx example.com (where xxx.xxx.xxx.xxx is the servers IP) on my local machine ...
1
vote
0answers
139 views

How to diagnose netstat: no namelist

I had to replace an NIC on my HP Proliant Microserver, running FreeNAS 9.3 In my crashplan jail, I now get "netstat: no namelist" as a response when I execute the netstat command. How to I diagnose ...
0
votes
0answers
54 views

smtp sending mail as “Charlie &”

I'm trying to use ssmtp to send mail from my jails to the mail hub in one of them. However, the from name isn't properly being renamed. The & isn't being replaced with root so I'm getting mails ...
3
votes
1answer
193 views

Should Postfix run chrooted if it already is in it a FreeBSD jail?

I'm running Postfix together with Dovecot and a few milters in a FreeBSD jail. Is there a significant security gain when I run SMTP and SMTPD daemons chrooted as well?
0
votes
1answer
226 views

FreeBSD & Jails: Send mail through Postfix in Jail

I have FreeBSD 10.2 and I'm using several Jails, one of them has Postfix installed. I want my other jails and my host system to use the local Postfix installation in the Jail. They should use ...
0
votes
0answers
69 views

FreeNAS Jail - Mount nullfs at jail boot

I have a need to mount using nullfs for a jail in FreeNAS and want this mount to be automatically set up at boot of the jail. I have not had luck finding a clean documented way of doing this that ...
0
votes
1answer
115 views

ezjail: “partially completed upgrade”

I just updated FreeBSD to 10.2 and after trying to update my jails through ezjail I get the following : ezjail-admin update -u Looking up update.FreeBSD.org mirrors... 5 mirrors found. Fetching ...
1
vote
1answer
84 views

What are the correct Linux permissions inside chroot jail with userspec

I am trying to setup a chroot jail, then I did: which binary ldd /bin/binary Then I did: cp /lib64/{libs} $jail/lib64 cp /usr/lib64/{libs} $jail/usr/lib64 PS: During this setup, I discovered ...
2
votes
1answer
181 views

Nginx: Tags in Syslog output on wrong position

I'm trying to output the logs of several Nginx servers in FreeBSD jails to the jails' host. I'm using FreeBSD 10 syslog and Nginx 1.7.10. In Nginx (in this case the hostname is web) I have set: ...
0
votes
1answer
2k views

FreeNAS/FreeBSD: How to access status of ZFS volume from jail?

I am trying to set up NRPE to enable remote Nagios monitoring of a new FreeNAS 0.91 system. I mostly have this working. I can connect and inquire about basic information like number of processes, ...
1
vote
2answers
131 views

Shutting down host from within jail

I've created a jail with ssh using Finch-Freebsd on a NAS4FREE and added a local non super user to access the jail via ssh. I want to be able to grant this user limited shell access specifically to ...
0
votes
1answer
64 views

apache / mysql unable to connect jails with PF firewall

I have setup two jail environments on FreeBSD11 root@ns312773:/etc # jls JID IP Address Hostname Path 1 10.6.6.6 www /usr/jails/...
2
votes
1answer
256 views

Jail user to only read/write into their user directory

I'm running a Ubuntu server and wanted to know if there was a way to only allow a user (connecting via FTP and SSH) read and write access to their own /home/user/ directory and not let them read or ...
4
votes
4answers
3k views

It is fair to jail my SFTP users to their home directory?

roots. I'm running an Ubuntu 9.04 (home) Server on my LAN. I currently use it to store little web apps, photos, some subversion repository and stuff like that. My (few) users are friends of mine and I ...
0
votes
0answers
133 views

configure pf.conf to NAT http / https to docker container running nginx

I have setup FreeBSD 11-CURRENT runing docker in a jailed environment as per https://wiki.freebsd.org/Docker When trying to deploy NGINX as per https://www.nginx.com/blog/deploying-nginx-nginx-plus-...
0
votes
1answer
61 views

Redirecting Public IPs to jails

My plan is to set up a server where I have several jails. Currently, I am planning on running three of them: a webserver, an owncloud server and a Teamspeak 3 server. I got it running so far that I ...
0
votes
1answer
169 views

What is the best method of installing programs into a chroot / jail?

On a Debian based system... I have created a minimal chroot/jail using a script similar to the one at https://github.com/pmenhart/make_chroot_jail/blob/master/make_chroot_jail.sh with the goal of ...
6
votes
2answers
3k views

Is there a tool for managing FreeBSD jails that knows about ZFS?

ZFS under FreeBSD lets one assign filesystems to a jail, such that an account in the jail with the appropriate privileges can access the filesystem, create new subordinate filesystems, and so forth. ...
5
votes
1answer
3k views

How can I start a shell inside a jail on FreeBSD?

I have access to a a previously set up FreeBSD box with a number of jails on it. One of the jails is an SQL server, and does not have ssh enabled on it. How can I gain access to a shell on that jail ...
0
votes
2answers
353 views

how limit php script to access parent host directory

I've a debian linux server with apache2.2 & php5 installed. I've created many virtual hosts on my apache server, each virtual host has a separate root directory & php is enabled for all of ...
0
votes
1answer
122 views

mongod bind_ip bind to wrong ip

I'm trying to setup a mongodb in a FreeBSD jail. I found in the documetation that I can set the bind_ip to 127.0.0.1 to allow only access from localhost. But when I check with sockstats it's bound to ...
0
votes
1answer
114 views

FreeBSD jail with ezjail fails to log in with non root users

I just installed a fresh new FreeBSD 10.1 (FreeBSD 10.1-RELEASE-p9) and set up a jail with ezjail (ezjail-admin v3.3). Inside the jail I created a new user: Login: test Password: * Uid [#]: 1001 Gid ...
0
votes
1answer
270 views

Sending syslog from jail to host fails

I'm trying to send logs from a jail to the host system on FreeBSD 10. I think everything is setup correctly but I can't get it working. Sending logs directly from Nginx 1.7 works but not sending ...
0
votes
1answer
66 views

Move a Sftp User in a Subdirectory of his Jail

I've a question concerning the Jail explained later: User to be jailed: foo Jail Directory: /mnt/foo-jail Home directory of foo: /mnt/foo-jail/foo-home Everything is ok. Jail is up and the user is ...
9
votes
3answers
5k views

use LXC under heavier virtualization (Xen, KVM,Hyper-V,VMVare)

Is it possible to use LXC under heavier virtualization (Xen DomU, KVM, Hyper-V, VMVare) ? I would like to use it as security (isolation) tool, the ability to limit resource consumption is not priority ...
0
votes
1answer
499 views

ports in freebsd jail fetching but not updating

I've created a jail to host my webserver/blog, but when attempting to build any port, I consistently get the message "portsnap: Directory is not writable: /usr/ports". Attached is a screen capture ...
0
votes
1answer
3k views

Fail2ban MTA=Postfix Setting in Jail Config giving Error

In /etc/fail2ban/jail.local, when I have the MTA setting to Postfix, Fail2Ban is showing an error and is unable to start. [DEFAULT] ignoreip = 127.0.0.1/8 bantime = 1800 ...
8
votes
1answer
4k views

Fail2ban jail.local vs jail.conf

Does jail.local file act as an override to jail.conf or as a replacement to jail.conf? When I was learning about Fail2Ban from tutorials, most of them usually say either to copy jail.conf to jail....
5
votes
0answers
2k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
0
votes
1answer
278 views

How to keep jailed users from changing directory to parent dirs?

I've chroot users with chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and I'm the only user in the chroot_list file. Other users log in jailed but when they ...
-2
votes
1answer
437 views

MariaDB service won't start on FreeBSD jail

Just set up a dedicated database jail running databases/mariadb55-server and for some reason it won't start on demand nor on boot. Any suggestions? # service mysql-server start Starting mysql. /usr/...
1
vote
2answers
5k views

How to connect FreeBSD Jail to network

So recently I successfully installed and configured a freebsd jail and I would like to install software within my jail but I cannot connect to the network. I'm trying to setup an apache+php+mysql ...
1
vote
1answer
159 views

How do I symlink one directory to a chrooted (jailed) directory?

'm trying to create a folder (directory) for a jailed user on my server that will allow him to access another folder outside of his jail. I'm trying to do this with symlink but all it does is create a ...
0
votes
1answer
159 views

FreeBSD jail and patch-levels

I am a newbie server manager and trying jails. It's too hard to configure it. So I decided to use ezjail utility. It seems working, but I got an issue. When I installed my FreeBSD box, it was 9.0-...
0
votes
1answer
108 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
312 views

Changing WebServer to use BSD Jails

I'm thinking of changing my web server so that Apache (and all of django web apps) run inside of a jail rather then on my host machine. I want to make this change for two reasons, the first and ...
6
votes
1answer
2k views

FreeBSD Jail with Loopback IP, IPFW, and natd - Outbound connections fail from jail

I've got a FreeBSD 9.0 server. It has several jails, but they all have this same issue. They can not initiate connections to the outside world. They communicate with each other and the host fine. ...
2
votes
3answers
824 views

Shared authentication across FreeBSD Jails

I am using FreeBSD with ZFS to run several jails. For jail management I'm using ezjail, and I have a template jail which I use for provisioning. I want to share passwd, groups, and authentication ...
-1
votes
1answer
114 views

Server Security: FTP and System Users

I'd be happy to get an advice about handling system users and ftp users on a Linux server (Ubuntu). Just want to do it right way. I have a sysUser.sysGroup and created virtual ftpUser.ftpGroup for ...
4
votes
2answers
1k views

Migrate FreeBSD jail

I need to create a freebsd jail for web hosting, that will be frequently migrated between hosts. How feasible is it? Can I use domains instead of IPs? can I use wildcard IPs? I need this to ...
-3
votes
2answers
963 views

Simplest way to jail users for git [closed]

I'd like to create a couple user accounts on my server such that the users can check out a specific git repository. Ideally, the user would not be able to gain access to a shell or copy any files ...
4
votes
3answers
672 views

SFTP access akin to jailed shell

I have a question about creating a user with sort of jailed shell access (actually all is required of this user is an sftp access to one particular directory). Scenario is as follows - I have an ...
1
vote
1answer
469 views

How to configure jailed apache to be accessible on the network

I have jailed apache on freebsd on a private network with ip address 192.168.100.174, I have another apache server running on the host but it is configured to listen on its other IP addresses but this....