Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [jail]

Jails improve on the concept of the traditional chroot environment in several ways. In a traditional chroot environment, processes are only limited in the part of the file system they can access.

1
vote
0answers
53 views

FreeBSD networking setup for multiple jails - interface clones or aliases

While setting up multiple jails on a FreeBSD machine, I also (naturally) need to set up the networking for each jail. It seems to me there are two ways of achieving the same goal - 1) setting up ...
4
votes
0answers
77 views

How can I determine what permissions my user is missing for receiving a ZFS dataset?

I have a FreeNAS (11.1-U1) and a FreeBSD (11.1-RELEASE-p6) machine. On the FreeNAS I'd like to zfs receive recursive snapshots as a non-root user with delegated privileges. This appears to work well ...
0
votes
1answer
100 views

Does using jails in FreeBSD count as having a switch?

My network administrators don't like when I plug switch into the building network to fan-out to multiple computers. They want single link drop per physical NIC. Previously the blocked those MACs on ...
0
votes
1answer
280 views

fail2ban not starting jails

I'm going nuts on my live server where fail2ban is not starting jails anymore. When i start fail2ban, everything looks fine: fail2ban-client -x start: 2017-11-14 15:51:32,403 fail2ban.server : INFO ...
2
votes
2answers
420 views

A simple, step-by-step way of setting up of “jailed” SFTP-only accounts

I feel like I've gone through every SFTP/Chroot tutorial on the Internet, and not found what I am looking for (or, at least, none of them have produced the right results). Here's my specifics: I will ...
1
vote
0answers
34 views

BSD jail availability in the event of NFS server failure

I have some BSD systems where I am considering the use of jails for processes that should be isolated from the rest of the system. The host system has some NFS mounts, and there is the issue that in ...
0
votes
1answer
104 views

apache userdir jail permissions

On Debian 8 I'm running apache2 in a jailed environment using jailkit and the userdir mod. In current jail setup users can navigate into another users directory i.e /home/jail/home/anotheruser and ...
2
votes
1answer
315 views

Apache virtual hosts in jail enviroment

I have a linux server with a chroot user jail environment. Users files are kept under /jail/username/httpdocs and are currently resolvable under http://IPADDRESS/~username I need users to be ...
1
vote
1answer
156 views

Is ssh chroot enough to allow shell access?

I'm planning to offer a backup service with limited ssh access. The best solution i've thought of so far would be to use chroot and allow access only to certain commands like: cd,mkdir,mv,rm,rsync,...
0
votes
1answer
102 views

jails in zfs space in freebsd 11, gives mount descfs error

Good Night, I am trying to deply a multijail environment using freebsd 11 on a OVH dedicated server. I created the cloned interfaces and created the jail , but as soon as I try to start it tells me ...
0
votes
0answers
125 views

Poudriere custom pkg issues

I created a custom Pkg in my Freebsd Server, I got running my .txz in my server and runs well, but The package in my own vm install's ok. But when I try to install it into the jail in Poudriere I got ...
7
votes
2answers
506 views

Migrate FreeBSD Jails to Linux

we are running some jails in FreeBSD 10 and the decision has been made to decommission the FreeBSD server and migrate all the jails to Linux environment Red Hat 6 or 7. Is there a straight forward ...
2
votes
1answer
694 views

FreeBSD jail as gateway

I am trying to set up a jail that will serve as a default gateway for some of my external clients. I have a VIMAGE jail that has a dedicated IP address in my local network which I want to use as a ...
0
votes
1answer
131 views

How to reuse filesystem subtree amongst multiple jails?

I have a FreeBSD 11 host, and I want to setup multiple jails in it. Official guide suggests hard copying /usr/bin into each of the containers. Having that my jails shall be nearly identical, this ...
0
votes
1answer
349 views

FreeNAS jail: Updating OpenSSL for certbot

I am using FreeNAS 9.3. Having created a jail for the purpose, I am trying to get nginx working together with certbot. The basic problem is the following: From what I gather this is because the base ...
0
votes
1answer
517 views

How do I list the user that started a service in freebsd

Just a simple question, but I've looked everywhere and can't seem to find this. I just need to know what user started a particular service. In this case, I want to know what user runs the headphones ...
0
votes
1answer
55 views

How to disable systemcalls in ftp environment with vsftpd?

I've set up a vsftpd server with local users jailed within their home directories. Anyhow if I connect through a ftp client I can execute systemcalls with the "!" command. How can I configure vsftpd ...
0
votes
1answer
951 views

Recommended way to run CentOS 7 on a host FreeBSD: VM or jailed environment?

I need to deploy either a CentOS VM or a jailed instance on a FreeBSD server (10.3). The solutions devised: - run it through VirtualBox (headless) - use bhyve I thought about a third alternative: ...
0
votes
0answers
245 views

Jailkit: cannot su to jailed user

As a part of a bigger setup (docker container with safe environment for running python scripts), I need to configure a jailed user. I have looked at different options and decided to try Jailkit. ...
0
votes
0answers
410 views

Can not start OpenVpn service within a FreeBSd Jail

Recentrly I've been fiddling with my FreeBSD VPS. I have it installed with FBSD 10.3, I created a jail with ezjail and installed openvpn from ports following the guide in http://bit.ly/1T6qg4G and ...
0
votes
1answer
988 views

DNS lookup to localhost gives network error

I am running a recursive DNS server on Unbound in a jail on FreeBSD with pf as a firewall. Running drill @xxx.xxx.xxx.xxx example.com (where xxx.xxx.xxx.xxx is the servers IP) on my local machine ...
3
votes
0answers
726 views

How to diagnose netstat: no namelist

I had to replace an NIC on my HP Proliant Microserver, running FreeNAS 9.3 In my crashplan jail, I now get "netstat: no namelist" as a response when I execute the netstat command. How to I diagnose ...
2
votes
2answers
220 views

gethostbyname failure and network timeouts in jail

I have a FreeBSD DigitalOcean droplet in which I followed this guide exactly for setting up a jail. The problem is I cannot get reliable network connectivity inside the jail. Doing curl https://www....
0
votes
1answer
625 views

smtp sending mail as “Charlie &”

I'm trying to use ssmtp to send mail from my jails to the mail hub in one of them. However, the from name isn't properly being renamed. The & isn't being replaced with root so I'm getting mails ...
3
votes
1answer
278 views

Should Postfix run chrooted if it already is in it a FreeBSD jail?

I'm running Postfix together with Dovecot and a few milters in a FreeBSD jail. Is there a significant security gain when I run SMTP and SMTPD daemons chrooted as well?
1
vote
1answer
808 views

FreeBSD & Jails: Send mail through Postfix in Jail

I have FreeBSD 10.2 and I'm using several Jails, one of them has Postfix installed. I want my other jails and my host system to use the local Postfix installation in the Jail. They should use ...
0
votes
1answer
320 views

ezjail: “partially completed upgrade”

I just updated FreeBSD to 10.2 and after trying to update my jails through ezjail I get the following : ezjail-admin update -u Looking up update.FreeBSD.org mirrors... 5 mirrors found. Fetching ...
1
vote
1answer
880 views

What are the correct Linux permissions inside chroot jail with userspec

I am trying to setup a chroot jail, then I did: which binary ldd /bin/binary Then I did: cp /lib64/{libs} $jail/lib64 cp /usr/lib64/{libs} $jail/usr/lib64 PS: During this setup, I discovered that /...
1
vote
2answers
494 views

Shutting down host from within jail

I've created a jail with ssh using Finch-Freebsd on a NAS4FREE and added a local non super user to access the jail via ssh. I want to be able to grant this user limited shell access specifically to ...
0
votes
1answer
117 views

apache / mysql unable to connect jails with PF firewall

I have setup two jail environments on FreeBSD11 root@ns312773:/etc # jls JID IP Address Hostname Path 1 10.6.6.6 www /usr/jails/...
0
votes
1answer
89 views

Redirecting Public IPs to jails

My plan is to set up a server where I have several jails. Currently, I am planning on running three of them: a webserver, an owncloud server and a Teamspeak 3 server. I got it running so far that I ...
0
votes
1answer
1k views

What is the best method of installing programs into a chroot / jail?

On a Debian based system... I have created a minimal chroot/jail using a script similar to the one at https://github.com/pmenhart/make_chroot_jail/blob/master/make_chroot_jail.sh with the goal of ...
0
votes
1answer
239 views

mongod bind_ip bind to wrong ip

I'm trying to setup a mongodb in a FreeBSD jail. I found in the documetation that I can set the bind_ip to 127.0.0.1 to allow only access from localhost. But when I check with sockstats it's bound to ...
0
votes
1answer
222 views

FreeBSD jail with ezjail fails to log in with non root users

I just installed a fresh new FreeBSD 10.1 (FreeBSD 10.1-RELEASE-p9) and set up a jail with ezjail (ezjail-admin v3.3). Inside the jail I created a new user: Login: test Password: * Uid [#]: 1001 Gid ...
0
votes
1answer
739 views

Sending syslog from jail to host fails

I'm trying to send logs from a jail to the host system on FreeBSD 10. I think everything is setup correctly but I can't get it working. Sending logs directly from Nginx 1.7 works but not sending ...
2
votes
1answer
390 views

Nginx: Tags in Syslog output on wrong position

I'm trying to output the logs of several Nginx servers in FreeBSD jails to the jails' host. I'm using FreeBSD 10 syslog and Nginx 1.7.10. In Nginx (in this case the hostname is web) I have set: ...
0
votes
1answer
164 views

Move a Sftp User in a Subdirectory of his Jail

I've a question concerning the Jail explained later: User to be jailed: foo Jail Directory: /mnt/foo-jail Home directory of foo: /mnt/foo-jail/foo-home Everything is ok. Jail is up and the user is ...
0
votes
1answer
940 views

ports in freebsd jail fetching but not updating

I've created a jail to host my webserver/blog, but when attempting to build any port, I consistently get the message "portsnap: Directory is not writable: /usr/ports". Attached is a screen capture ...
1
vote
2answers
7k views

Fail2ban MTA=Postfix Setting in Jail Config giving Error

In /etc/fail2ban/jail.local, when I have the MTA setting to Postfix, Fail2Ban is showing an error and is unable to start. [DEFAULT] ignoreip = 127.0.0.1/8 bantime = 1800 ...
21
votes
1answer
12k views

Fail2ban jail.local vs jail.conf

Does jail.local file act as an override to jail.conf or as a replacement to jail.conf? When I was learning about Fail2Ban from tutorials, most of them usually say either to copy jail.conf to jail....
6
votes
0answers
4k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
0
votes
1answer
722 views

How to keep jailed users from changing directory to parent dirs?

I've chroot users with chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and I'm the only user in the chroot_list file. Other users log in jailed but when they go ...
-2
votes
1answer
733 views

MariaDB service won't start on FreeBSD jail

Just set up a dedicated database jail running databases/mariadb55-server and for some reason it won't start on demand nor on boot. Any suggestions? # service mysql-server start Starting mysql. /usr/...
1
vote
1answer
787 views

How do I symlink one directory to a chrooted (jailed) directory?

'm trying to create a folder (directory) for a jailed user on my server that will allow him to access another folder outside of his jail. I'm trying to do this with symlink but all it does is create a ...
0
votes
1answer
201 views

FreeBSD jail and patch-levels

I am a newbie server manager and trying jails. It's too hard to configure it. So I decided to use ezjail utility. It seems working, but I got an issue. When I installed my FreeBSD box, it was 9.0-...
0
votes
1answer
142 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
3k views

FreeNAS/FreeBSD: How to access status of ZFS volume from jail?

I am trying to set up NRPE to enable remote Nagios monitoring of a new FreeNAS 0.91 system. I mostly have this working. I can connect and inquire about basic information like number of processes, ...
0
votes
1answer
472 views

Changing WebServer to use BSD Jails

I'm thinking of changing my web server so that Apache (and all of django web apps) run inside of a jail rather then on my host machine. I want to make this change for two reasons, the first and ...
6
votes
1answer
3k views

FreeBSD Jail with Loopback IP, IPFW, and natd - Outbound connections fail from jail

I've got a FreeBSD 9.0 server. It has several jails, but they all have this same issue. They can not initiate connections to the outside world. They communicate with each other and the host fine. ...
-1
votes
1answer
134 views

Server Security: FTP and System Users

I'd be happy to get an advice about handling system users and ftp users on a Linux server (Ubuntu). Just want to do it right way. I have a sysUser.sysGroup and created virtual ftpUser.ftpGroup for ...