Jails improve on the concept of the traditional chroot environment in several ways. In a traditional chroot environment, processes are only limited in the part of the file system they can access.

learn more… | top users | synonyms

1
vote
2answers
145 views

System Security (PHP and others)

I have a few important documents that I keep owned by www-data (apache's user) in my /var/www/ folder. They have to be www-data because PHP will write to them at times. I also have users who access ...
0
votes
2answers
359 views

how limit php script to access parent host directory

I've a debian linux server with apache2.2 & php5 installed. I've created many virtual hosts on my apache server, each virtual host has a separate root directory & php is enabled for all of ...
0
votes
2answers
95 views

Crossplatform “jail” for an application

We currently have a variety of systems (Linux, Solarix, *BSD, HP-UX ...) on which we are not allowed to install anything into / (but I have root access. That's strange, I know). But we'd like to run ...
2
votes
1answer
183 views

Nginx: Tags in Syslog output on wrong position

I'm trying to output the logs of several Nginx servers in FreeBSD jails to the jails' host. I'm using FreeBSD 10 syslog and Nginx 1.7.10. In Nginx (in this case the hostname is web) I have set: ...
1
vote
1answer
90 views

What are the correct Linux permissions inside chroot jail with userspec

I am trying to setup a chroot jail, then I did: which binary ldd /bin/binary Then I did: cp /lib64/{libs} $jail/lib64 cp /usr/lib64/{libs} $jail/usr/lib64 PS: During this setup, I discovered ...
1
vote
1answer
472 views

How to configure jailed apache to be accessible on the network

I have jailed apache on freebsd on a private network with ip address 192.168.100.174, I have another apache server running on the host but it is configured to listen on its other IP addresses but this....
1
vote
1answer
872 views

Is it possible to run dhcpd3 as non-root user in a chroot jail?

I would like to run dhcpd3 from a chroot jail on Debian Lenny. At the moment, I can run it as root from my jail. Now I want to do this as non-root user (as "-u blah -t /path/to/jail" Bind option). ...
0
votes
1answer
239 views

FreeBSD & Jails: Send mail through Postfix in Jail

I have FreeBSD 10.2 and I'm using several Jails, one of them has Postfix installed. I want my other jails and my host system to use the local Postfix installation in the Jail. They should use ...
0
votes
1answer
62 views

Redirecting Public IPs to jails

My plan is to set up a server where I have several jails. Currently, I am planning on running three of them: a webserver, an owncloud server and a Teamspeak 3 server. I got it running so far that I ...
0
votes
1answer
114 views

FreeBSD jail with ezjail fails to log in with non root users

I just installed a fresh new FreeBSD 10.1 (FreeBSD 10.1-RELEASE-p9) and set up a jail with ezjail (ezjail-admin v3.3). Inside the jail I created a new user: Login: test Password: * Uid [#]: 1001 Gid ...
0
votes
1answer
281 views

Sending syslog from jail to host fails

I'm trying to send logs from a jail to the host system on FreeBSD 10. I think everything is setup correctly but I can't get it working. Sending logs directly from Nginx 1.7 works but not sending ...
0
votes
1answer
520 views

ports in freebsd jail fetching but not updating

I've created a jail to host my webserver/blog, but when attempting to build any port, I consistently get the message "portsnap: Directory is not writable: /usr/ports". Attached is a screen capture ...
0
votes
1answer
160 views

FreeBSD jail and patch-levels

I am a newbie server manager and trying jails. It's too hard to configure it. So I decided to use ezjail utility. It seems working, but I got an issue. When I installed my FreeBSD box, it was 9.0-...
0
votes
1answer
108 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
-1
votes
1answer
114 views

Server Security: FTP and System Users

I'd be happy to get an advice about handling system users and ftp users on a Linux server (Ubuntu). Just want to do it right way. I have a sysUser.sysGroup and created virtual ftpUser.ftpGroup for ...
5
votes
0answers
2k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
2
votes
0answers
359 views

Jail PHP to OpenBasedir or Document Root Debian

I have a VServer running with Debian Squeeze Debian Squeeze / Apache2 / FastCGI / MySQL / Froxlor. The administration of Customers, Domains and FTP Accounts are performed using Froxlor. Following ...
2
votes
0answers
75 views

Simplest & Easy Way To Jail Users

I Need Simplest & Easy Way To Jail Users in there home directories I am looking tools like " jailkit & MySecureShell " Or simple configuration to jailing users (with full help or some good ...
1
vote
0answers
164 views

How to diagnose netstat: no namelist

I had to replace an NIC on my HP Proliant Microserver, running FreeNAS 9.3 In my crashplan jail, I now get "netstat: no namelist" as a response when I execute the netstat command. How to I diagnose ...
0
votes
0answers
53 views

Jailkit: cannot su to jailed user

As a part of a bigger setup (docker container with safe environment for running python scripts), I need to configure a jailed user. I have looked at different options and decided to try Jailkit. ...
0
votes
0answers
24 views

Find Unknown Predicate JailedShell

Well, after months experimenting with ', ", and \" it seems i cant find the right pattern that could generate the correct code for a cron job on a jailed shell. I got this code below works on jailed ...
0
votes
0answers
12 views

ezjail-admin adds a faulty path to repo url when installing base.txz

today I've burned my brains trying to solve this and decided to post here. Here the problem: I have a local test freebsd 10.2 server and installed ezjail, but when I try to run ezjail-admin install ...
0
votes
0answers
88 views

Can not start OpenVpn service within a FreeBSd Jail

Recentrly I've been fiddling with my FreeBSD VPS. I have it installed with FBSD 10.3, I created a jail with ezjail and installed openvpn from ports following the guide in http://bit.ly/1T6qg4G and ...
0
votes
0answers
57 views

smtp sending mail as “Charlie &”

I'm trying to use ssmtp to send mail from my jails to the mail hub in one of them. However, the from name isn't properly being renamed. The & isn't being replaced with root so I'm getting mails ...
0
votes
0answers
73 views

FreeNAS Jail - Mount nullfs at jail boot

I have a need to mount using nullfs for a jail in FreeNAS and want this mount to be automatically set up at boot of the jail. I have not had luck finding a clean documented way of doing this that ...
0
votes
0answers
144 views

configure pf.conf to NAT http / https to docker container running nginx

I have setup FreeBSD 11-CURRENT runing docker in a jailed environment as per https://wiki.freebsd.org/Docker When trying to deploy NGINX as per https://www.nginx.com/blog/deploying-nginx-nginx-plus-...