Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Mar 2008 20:59:08 +0100
From:      Kurt Jaeger <lists@c0mplx.org>
To:        freebsd-stable@freebsd.org
Subject:   Re: inetd and freebsd service jail
Message-ID:  <20080327195908.GB57996@home.opsec.eu>
In-Reply-To: <20080327192945.GA57996@home.opsec.eu>
References:  <BLU118-W91CABC84FB9304A5C2308D0FE0@phx.gbl> <20080327192945.GA57996@home.opsec.eu>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi!

> > I have a jail for pureftpd service,
> > it is possible that inetd from the main system launch FTP server
> > inside the jail?
> 
> No, it's not possible.

I have to correct myself here.

> The reason:
> 
> When your client connects to the IP of the jail,
> inetd.conf running on the main system can start some
> 
> jexec <jail-id> /usr/libexec/ftpd ...
> 
> But: The <jail-id> depends on the IP the client is connecting to,
> and inetd has no lookup-hook to find the <jail-id> from the IP adress.
> 
> It might not be too difficult to add this feature to inetd,
> but right now, it's not available.

Sounds like writing some script which is started from inetd
and which wraps some jexec call might be possible.

-- 
pi@opsec.eu            +49 171 3101372                        12 years to go !



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080327195908.GB57996>