From owner-freebsd-security  Thu May 23  5:12:28 2002
Delivered-To: freebsd-security@freebsd.org
Received: from saigon.cpd.ufsm.br (saigon.cpd.ufsm.br [200.18.32.130])
	by hub.freebsd.org (Postfix) with ESMTP id A249B37B40B
	for <freebsd-security@freebsd.org>; Thu, 23 May 2002 05:12:15 -0700 (PDT)
Received: from marcio by saigon.cpd.ufsm.br with local (Exim 3.16 #7)
	id 17ArRZ-0005Vu-00; Thu, 23 May 2002 09:11:45 -0300
Date: Thu, 23 May 2002 09:11:45 -0300 (GRNLNDST)
From: Marcio d'Avila Scheibler <marcio@cpd.ufsm.br>
To: Nielsen <nielsen@memberwebs.com>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: 'jailer' for managing jails
In-Reply-To: <20020523053002.2967537B403@hub.freebsd.org>
Message-ID: <Pine.A41.4.05.10205230846470.5852-100000@saigon.cpd.ufsm.br>
X-Mailer: Pine 4.05
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


I've read your manpage and found it interesting.
Some time ago I wrote some scripts to help jail configuration
and management, but I think for start and stop your
solution seems to be cleaner.

For those scripts I have an text file called "jailtab", where
each line defines one jail, with following fields:

- jail hostname
- jail root dir
- jail ip address
- jail default started command ("/bin/sh /etc/rc", but from
now "/usr/local/sbin/jailer" :-) )

This file prevents you from needing to enter all those parameters
whe using the scripts.

By the way, scripts are the following:

- jail-start <hostname> [command]       # starts the jail
- jail-stop <hostname>			# needs HOST (not jail) /proc
- jail-procfs <hostname} [mount|umount] # (u)mounts jail /proc

- jail-install
Performs "make install" from host /usr/src as is told in 
jail manpage

- jail-config
Performs some config steps as is told in jail manpage (timezone,
root password, etc...) and also copies a list of files
defined in a "filelist" config file.

Let me now if you have interest in add and improve this 
modest contrib, I send you a tarball with scripts and sample 
"jailtab" file. In this case feel free to change jail-start 
and jail-stop to handle "jailer"...


On Wed, 22 May 2002, Nielsen wrote:

> Date: Wed, 22 May 2002 22:30:02 -0700 (PDT)
> From: Nielsen <nielsen@memberwebs.com>
> To: freebsd-security@FreeBSD.ORG
> Subject: 'jailer' for managing jails
> 
> Since the discussion here often revolves around jails, here's something I
> put together for managing jails. Comments welcome.
> 
> http://memberwebs.com/nielsen/freebsd/jailer/
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 
> 

------------------------------------------------------------------------------
Marcio d'Avila Scheibler - Divisao de Suporte (marcio@cpd.ufsm.br)
Centro de Processamento de Dados - Campus Universitario - CEP 97105-900
Universidade Federal de Santa Maria - RS - Brasil
=============================================================================


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message