Questions tagged [jail]
Jails improve on the concept of the traditional chroot environment in several ways. In a traditional chroot environment, processes are only limited in the part of the file system they can access.
28
questions with no upvoted or accepted answers
5
votes
0
answers
2k
views
How to mount a fuse-sshfs file system inside a FreeBSD-12.0p10 jail
I wish to mount a remote data source locally as a fuse file system. This is listed as supported by lsvfs:
lsvfs
Filesystem Num Refs Flags
-------------------------------...
5
votes
0
answers
2k
views
FreeBSD networking setup for multiple jails - interface clones or aliases
While setting up multiple jails on a FreeBSD machine, I also (naturally) need to set up the networking for each jail. It seems to me there are two ways of achieving the same goal
setting up multiple ...
3
votes
0
answers
907
views
How to diagnose netstat: no namelist
I had to replace an NIC on my HP Proliant Microserver, running FreeNAS 9.3
In my crashplan jail, I now get "netstat: no namelist" as a response when I execute the netstat command. How to I diagnose ...
3
votes
0
answers
100
views
Simplest & Easy Way To Jail Users
I Need Simplest & Easy Way To Jail Users in there home directories
I am looking tools like " jailkit & MySecureShell "
Or
simple configuration to jailing users (with full help or some good ...
2
votes
2
answers
2k
views
FreeBSD & Jails: Send mail through Postfix in Jail
I have FreeBSD 10.2 and I'm using several Jails, one of them has Postfix installed.
I want my other jails and my host system to use the local Postfix installation in the Jail. They should use ...
2
votes
0
answers
781
views
Jail PHP to OpenBasedir or Document Root Debian
I have a VServer running with Debian Squeeze Debian Squeeze / Apache2 / FastCGI / MySQL / Froxlor. The administration of Customers, Domains and FTP Accounts are performed using Froxlor.
Following ...
2
votes
1
answer
595
views
Nginx: Tags in Syslog output on wrong position
I'm trying to output the logs of several Nginx servers in FreeBSD jails to the jails' host.
I'm using FreeBSD 10 syslog and Nginx 1.7.10.
In Nginx (in this case the hostname is web) I have set:
...
1
vote
0
answers
1k
views
FreeNAS unable to resolve hostnames, ping of any external IP returns host's ip instead
The internal IP address of my router changed, and ever since TrueNAS has been misbehaving. None of the jails can resolve a hostname anymore. In troubleshooting this, I discovered that the client ...
1
vote
1
answer
242
views
Cannot stop Postgresql in FreeBsd Jail
I installed postgresql in a jail, it starts automatically after adding postgresql_enable="YES" to /etc/rc.conf), but now I can't stop it.
I tried /usr/local/etc/rc.d/postgresql stop, but I've got:
...
1
vote
0
answers
64
views
BSD jail availability in the event of NFS server failure
I have some BSD systems where I am considering the use of jails for processes that should be isolated from the rest of the system.
The host system has some NFS mounts, and there is the issue that in ...
1
vote
1
answer
320
views
FreeBSD jail and patch-levels
I am a newbie server manager and trying jails. It's too hard to configure it. So I decided to use ezjail utility. It seems working, but I got an issue.
When I installed my FreeBSD box, it was 9.0-...
1
vote
1
answer
1k
views
How to configure jailed apache to be accessible on the network
I have jailed apache on freebsd on a private network with ip address 192.168.100.174, I have another apache server running on the host but it is configured to listen on its other IP addresses but this....
1
vote
2
answers
168
views
System Security (PHP and others)
I have a few important documents that I keep owned by www-data (apache's user) in my /var/www/ folder. They have to be www-data because PHP will write to them at times.
I also have users who access ...
0
votes
0
answers
101
views
ARP Connectivity Issues Between OpenMediaVault Server and BSD Jails
On my network I have two servers.
Server1 is running TrueNas(BSD) with multiple applications running in iocage jails. It's connected to the network with a 3-nic LAGG.
Server2 is an OpenMediaVault (...
0
votes
1
answer
123
views
monitoring real time file access in chroot system
I was wondering if it's possible to write a shell script that:
runs chroot for a given userspec and group
monitors/intercepts system calls all processes started, and what libraries they attempt to ...
0
votes
0
answers
328
views
Static files getting requested with internal IP address prefix instead of domain-name prefix
I have a smoothly running FreeBSD box with a couple of jails running their own servers.
Nginx runs in its own jail and the main machine uses pf to redirect all http/s requests to Nginx. Nginx ...
0
votes
1
answer
455
views
apache userdir jail permissions
On Debian 8 I'm running apache2 in a jailed environment using jailkit and the userdir mod. In current jail setup users can navigate into another users directory i.e
/home/jail/home/anotheruser
and ...
0
votes
1
answer
202
views
jails in zfs space in freebsd 11, gives mount descfs error
Good Night, I am trying to deply a multijail environment using freebsd 11 on a OVH dedicated server.
I created the cloned interfaces and created the jail , but as soon as I try to start it tells me ...
0
votes
1
answer
578
views
FreeNAS jail: Updating OpenSSL for certbot
I am using FreeNAS 9.3. Having created a jail for the purpose, I am trying to get nginx working together with certbot.
The basic problem is the following:
From what I gather this is because the base ...
0
votes
0
answers
629
views
Jailkit: cannot su to jailed user
As a part of a bigger setup (docker container with safe environment for running python scripts), I need to configure a jailed user. I have looked at different options and decided to try Jailkit. ...
0
votes
1
answer
117
views
Redirecting Public IPs to jails
My plan is to set up a server where I have several jails. Currently, I am planning on running three of them: a webserver, an owncloud server and a Teamspeak 3 server.
I got it running so far that I ...
0
votes
1
answer
362
views
FreeBSD jail with ezjail fails to log in with non root users
I just installed a fresh new FreeBSD 10.1 (FreeBSD 10.1-RELEASE-p9) and set up a jail with ezjail (ezjail-admin v3.3).
Inside the jail I created a new user:
Login: test
Password: *
Uid [#]: 1001
Gid ...
0
votes
1
answer
1k
views
ports in freebsd jail fetching but not updating
I've created a jail to host my webserver/blog, but when attempting to build any port, I consistently get the message "portsnap: Directory is not writable: /usr/ports".
Attached is a screen capture ...
0
votes
1
answer
284
views
Centos6.4: User home directory for sftp
Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
2
answers
642
views
how limit php script to access parent host directory
I've a debian linux server with apache2.2 & php5 installed.
I've created many virtual hosts on my apache server, each virtual host has a separate root directory & php is enabled for all of ...
0
votes
2
answers
146
views
Crossplatform "jail" for an application
We currently have a variety of systems (Linux, Solarix, *BSD, HP-UX ...) on which we are not allowed to install anything into / (but I have root access. That's strange, I know). But we'd like to run ...
-1
votes
1
answer
79
views
fail2ban Jail starts but no connections are showed
I installed fail2ban on my Ubuntu server.
It seems to starts fine:
cat fail2ban.log
2023-12-07 14:55:27,758 fail2ban.server [803]: INFO --------------------------------------------------
...
-1
votes
1
answer
153
views
Server Security: FTP and System Users
I'd be happy to get an advice about handling system users and ftp users on a Linux server (Ubuntu). Just want to do it right way.
I have a sysUser.sysGroup and created virtual ftpUser.ftpGroup for ...