Hot answers tagged jail
According to the Manual 8 0 "Every .conf file can be overridden with a file named .local. The .conf file is read first, then .local, with later settings overriding earlier ones. Thus, a .local file doesn't have to include everything in the corresponding .conf file, only those settings that you wish to override. Modifications should take place in the .local ...
Looking at my /etc/fail2ban/jail.local there is this comment: Since 0.8.1 upstream fail2ban uses sendmail MTA for the mailing. Change mta configuration parameter to mail if you want to revert to conventional 'mail' Based on this and the error you posted, it seems you can only specify sendmail or mail. Do you receive emails from fail2ban when mta is set ...
You need to add: passwd_chroot_enable=YES From the man page: passwd_chroot_enable If enabled, along with chroot_local_user , then a chroot() jail location may be specified on a per-user basis. Each user's jail is derived from their home directory string in /etc/passwd.
Yes you can. LXC is virtualization per OS; moreover, It's process's isolation, so hardware specific requirements for virtualization doesn't need to be complied. The only thing that you need is a recent kernel >3.13 for all the proper LXC dependencies like namespaces and cgroups. BUT, you have to be really careful about how you are going to manage your ...
You probably need to add 127.0.0.1 to the jail, as jails will forbid binding to anything but the jail ip. But, if you want to confine mongo just to the jail, maybe a better idea would be to firewall it ... using 127.0.0.1 in jail could be wrong from security point of view.
There are multiple ways to setup chroot jails. Personally I've seen over 50 different scripts for that. All jails are similar, but have smaller or bigger differences, so there is no generic way to do anything inside them. The most common usage of chroot jails regarding installing software, is installing everything from source. Sometimes chroot jails are ...
Only top voted, non community-wiki answers of a minimum length are eligible