From owner-freebsd-jail@FreeBSD.ORG Fri Aug 17 12:06:32 2007 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EA19116A419 for ; Fri, 17 Aug 2007 12:06:32 +0000 (UTC) (envelope-from info@plot.uz) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.168]) by mx1.freebsd.org (Postfix) with ESMTP id 429F813C494 for ; Fri, 17 Aug 2007 12:06:32 +0000 (UTC) (envelope-from info@plot.uz) Received: by ug-out-1314.google.com with SMTP id o4so376632uge for ; Fri, 17 Aug 2007 05:06:31 -0700 (PDT) Received: by 10.67.118.20 with SMTP id v20mr2928458ugm.1187350623060; Fri, 17 Aug 2007 04:37:03 -0700 (PDT) Received: from plot.uz ( [83.221.183.87]) by mx.google.com with ESMTPS id 34sm464112nfu.2007.08.17.04.36.56 (version=TLSv1/SSLv3 cipher=RC4-MD5); Fri, 17 Aug 2007 04:37:02 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=unavailable version=3.1.7 X-Spam-Report: Received: from localhost by plot.uz (MDaemon PRO v9.5.5) with DomainPOP id md50000004589.msg for ; Fri, 17 Aug 2007 16:36:27 +0500 Delivered-To: aleksey@plot.uz Received: by 10.100.154.8 with SMTP id b8cs590971ane; Fri, 17 Aug 2007 04:32:11 -0700 (PDT) Received: by 10.114.169.2 with SMTP id r2mr2402374wae.1187350331045; Fri, 17 Aug 2007 04:32:11 -0700 (PDT) Received: from mx2.freebsd.org (mx2.freebsd.org [69.147.83.53]) by mx.google.com with ESMTP id j6si2912430wah.2007.08.17.04.32.10; Fri, 17 Aug 2007 04:32:11 -0700 (PDT) Received-SPF: pass (google.com: domain of owner-freebsd-security@freebsd.org designates 69.147.83.53 as permitted sender) client-ip=69.147.83.53; Received: from hub.freebsd.org (hub.freebsd.org [IPv6:2001:4f8:fff6::36]) by mx2.freebsd.org (Postfix) with ESMTP id 479DF32602; Fri, 17 Aug 2007 11:30:59 +0000 (UTC) (envelope-from owner-freebsd-security@freebsd.org) Received: from hub.freebsd.org (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id 81C5A16A4C2; Fri, 17 Aug 2007 11:30:58 +0000 (UTC) (envelope-from owner-freebsd-security@freebsd.org) Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 05DEB16A417 for ; Fri, 17 Aug 2007 08:26:34 +0000 (UTC) (envelope-from alexander@leidinger.net) Received: from redbull.bpaserver.net (redbullneu.bpaserver.net [213.198.78.217]) by mx1.freebsd.org (Postfix) with ESMTP id B641413C458 for ; Fri, 17 Aug 2007 08:26:33 +0000 (UTC) (envelope-from alexander@leidinger.net) Received: from outgoing.leidinger.net (p54A54EAF.dip.t-dialin.net [84.165.78.175]) by redbull.bpaserver.net (Postfix) with ESMTP id D936F2E10F; Fri, 17 Aug 2007 10:07:49 +0200 (CEST) Received: from webmail.leidinger.net (webmail.Leidinger.net [192.168.1.102]) by outgoing.leidinger.net (Postfix) with ESMTP id CF7425B4D80; Fri, 17 Aug 2007 10:07:36 +0200 (CEST) Received: (from www@localhost) by webmail.leidinger.net (8.13.8/8.13.8/Submit) id l7H87arC032767; Fri, 17 Aug 2007 10:07:36 +0200 (CEST) (envelope-from Alexander@Leidinger.net) Received: from pslux.cec.eu.int (pslux.cec.eu.int [158.169.9.14]) by webmail.leidinger.net (Horde MIME library) with HTTP; Fri, 17 Aug 2007 10:07:36 +0200 Message-ID: <20070817100736.8291zwehpcgc4444@webmail.leidinger.net> X-Priority: 3 (Normal) Date: Fri, 17 Aug 2007 10:07:36 +0200 To: mal content References: <8e96a0b90708162210y2cb9c6b2gb858f277674f84d1@mail.gmail.com> In-Reply-To: <8e96a0b90708162210y2cb9c6b2gb858f277674f84d1@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable User-Agent: Internet Messaging Program (IMP) H3 (4.1.4) / FreeBSD-7.0 X-BPAnet-MailScanner-Information: Please contact the ISP for more information X-BPAnet-MailScanner: Found to be clean X-BPAnet-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-12.823, required 8, BAYES_00 -15.00, BR_SPAMMER_URI 2.00, RDNS_DYNAMIC 0.10, TW_EV 0.08) X-BPAnet-MailScanner-From: alexander@leidinger.net X-Mailman-Approved-At: Fri, 17 Aug 2007 11:23:31 +0000 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Errors-To: owner-freebsd-security@freebsd.org X-Return-Path: owner-freebsd-security@freebsd.org X-Envelope-From: owner-freebsd-security@freebsd.org X-MDaemon-Deliver-To: freebsd-jail@freebsd.org X-Spam-Processed: plot.uz, Fri, 17 Aug 2007 16:36:27 +0500 From: Alexander Leidinger Cc: freebsd-security@freebsd.org, freebsd-jail@freebsd.org Subject: Re: Jailed X applications X-BeenThere: freebsd-jail@freebsd.org List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Aug 2007 12:06:33 -0000 Quoting mal content (from Fri, 17 Aug =20 2007 06:10:39 +0100): This is better suited for freebsd-jail@ (CCed), please remove =20 freebsd-security@ on reply to move the discussion there. > Has anyone here ever successfully set up a jail for X apps, connecting > to an external X server? I'm trying an experimental sandbox setup here. I have my X server itself in a jail (needs a kernel patch and some =20 devfs rules), and in the past connected to a jail and started a X11 =20 programm there... IIRC. > I have a jail running on an aliased IP on my local machine and X > programs connect out of the jail to my local X server via an SSH > tunneled TCP connection. All other packets to and from the jail are > denied by the packet filter. The trouble I am having is that many > applications (all X apps so far and a few of the SSH tools) try to open > and read from /dev/tty, which clearly isn't going to happen: ssh uses a tty (pty?), but normally you have some in a jail. How do =20 you start the jail? There should be devfs mounted in the jail. Bye, Alexander. --=20 "How do I love thee? My accumulator overflows." http://www.Leidinger.net Alexander @ Leidinger.net: PGP ID =3D B0063FE7 http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID =3D 72077137 _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"