Date: Mon, 25 Jun 2001 18:53:23 -0400 (EDT) From: Evan Sarmiento <kaworu@sektor7.ath.cx> To: freebsd-hackers@freebsd.org Message-ID: <200106252253.SAA14673@mail1.javanet.com>
index | next in thread | raw e-mail
Subject: jailuser project --text follows this line-- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I would like your input on a project I am currently working on called Jailuser. Jail, which is similar, chroots an enviornment and sets restrictions on processes forked within. However, problems arise: Inability to login to jail from console, hard to manage externally, have to reproduce base system for each jail (or an nfs mount, but insecure) Therefore, I have created jailuser. Users with UID of 1000 have the same jail restrictions, eg. unable to use certain socket functions, sysv ipc, etc. Also, users are confined by a "kernel restricted shell", which I have yet to implement. I have committed a few things, http://savannah.gnu.org/projects/jailuser/, please take a look. Thanks, Evan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (SunOS) Comment: Processed by Mailcrypt 3.5.6 and Gnu Privacy Guard <http://www.gnupg.org/>; iEYEARECAAYFAjs3waAACgkQBLUKTEZ4y0bhNQCfYjgfmzM8R9GHdoIY0veoQUFF 7kkAn2Opz8H+RMIF1HIx73Sqw4stTR+J =L2xv -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the messagehelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200106252253.SAA14673>