jailkit-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Jailkit-users] Re: Jailkit-users Digest, Vol 41, Issue 6


From: John Asplund
Subject: [Jailkit-users] Re: Jailkit-users Digest, Vol 41, Issue 6
Date: Wed, 22 Apr 2009 10:45:18 -0600

That was what I expected, thank you for response.

On Wed, Apr 22, 2009 at 10:02 AM, <address@hidden> wrote:
Send Jailkit-users mailing list submissions to
       address@hidden

To subscribe or unsubscribe via the World Wide Web, visit
       http://lists.nongnu.org/mailman/listinfo/jailkit-users
or, via email, send a message with subject or body 'help' to
       address@hidden

You can reach the person managing the list at
       address@hidden

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Jailkit-users digest..."


Today's Topics:

  1. further security (John Asplund)
  2. Re: further security (Olivier Sessink)


----------------------------------------------------------------------

Message: 1
Date: Tue, 21 Apr 2009 11:36:19 -0600
From: John Asplund <address@hidden>
Subject: [Jailkit-users] further security
To: address@hidden
Message-ID:
       <address@hidden>
Content-Type: text/plain; charset="iso-8859-1"

Can I make my jail tighter so users can not see directories up from their
home directory?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.gnu.org/pipermail/jailkit-users/attachments/20090421/ef2197f0/attachment.html

------------------------------

Message: 2
Date: Tue, 21 Apr 2009 23:50:21 +0200
From: Olivier Sessink <address@hidden>
Subject: Re: [Jailkit-users] further security
To: address@hidden
Message-ID: <address@hidden>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

John Asplund wrote:
> Can I make my jail tighter so users can not see directories up from
> their home directory?

you can play with unix permissions on the directories (remove either
read or execute) and see if things remain functional or not. But users
need access to <jail>/etc/passwd and files like that to have a
functional account, so I don't think there is any real advantage in
security. You'' have to use multiple jails to really separate users. The
advantage in security is very minimal though.

Olivier




------------------------------

_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users


End of Jailkit-users Digest, Vol 41, Issue 6
********************************************


reply via email to

[Prev in Thread] Current Thread [Next in Thread]