Re: jail

From: alexus (ml@db.nexgen.com)
Date: 11/05/01


From: "alexus" <ml@db.nexgen.com>
To: <cjclark@alum.mit.edu>
Date: Mon, 5 Nov 2001 02:54:16 -0500

how else should i set it up then?

my jail users seems to be really in jail :)

i mean they can't go outside of jail to evil internet:] they can't browse
they can't telnet/ssh outside they can't use irc nothing

any ideas?

----- Original Message -----
From: "Crist J. Clark" <cristjc@earthlink.net>
To: "alexus" <ml@db.nexgen.com>
Cc: <freebsd-security@FreeBSD.ORG>
Sent: Monday, November 05, 2001 1:32 AM
Subject: Re: jail

> On Sun, Nov 04, 2001 at 07:55:38PM -0500, alexus wrote:
> > does jail require to have NAT set up in order for jail users to go
outside
> > of jail (like browse, telneting out and etc..)
>
> No.
> --
> Crist J. Clark | cjclark@alum.mit.edu
> | cjclark@jhu.edu
> http://people.freebsd.org/~cjc/ | cjc@freebsd.org
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Re: Some questions about jails
    ... You don't need to start a jail with procfs, ... > network card present in the host system? ... > one jail's purpouses is to fool the jail users, ...
    (freebsd-hackers)
  • Re: misc/187307: Security vulnerability with FreeBSD Jail
    ... give out host shell account, privileged or not, to jail users if they ... jail# chmod 6555 /bin/root_shell ... you basically have a setuid binary that can be reached from host ... jail users have no business on the host. ...
    (FreeBSD-Security)
  • jail
    ... does jail require to have NAT set up in order for jail users to go outside ... of jail (like browse, telneting out and etc..) ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: jail
    ... > does jail require to have NAT set up in order for jail users to go outside ... telneting out and etc..) ...
    (FreeBSD-Security)
  • Unable to connect to jail
    ... I have given my network card an alias using ... of my jail which is acting as an ftp server but I am unable to ping it from ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)