Re: [Jailkit-users] Jailing a Java server application

[Richard Scott]

Hi,

Did you get the chroot shell working? You will need to be able to "su - chrooteduser" before you can do anything with Java so if you haven't I would work on setting that up first.

Once you have done that with the help of the jk_init command you can then use the jk_cp command to help copy files into the chroot. Basically you want to copy all the JVM files into the chroot and create any /dev devices that you require in the chroot. It's not an easy task as you will need to know which files and which devices to copy/create. The jk_cp command does its best to detect what's required but it most likely won't get everything you need for the JVM setup.

EDIT: after a quick google I found this that may help you:

http://useranswer.com/answer/jailkit-allowing-use-of-javapython/

Hope that helps,

Rich

On 27/02/2013 06:42 PM, Greg Chambers wrote:

Greetings,

New user here. I was following the instructions listed on this answer found here when I got stuck on the jk_init phase. (Third listed answer and the one that's accepted.)

http://askubuntu.com/questions/93411/simplest-easy-way-to-jail-users

The problem I am having is that it seems like jailkit relies on the presets for jk_init to be enough to give a jailed application what it needs to run. However, I am trying to jail a server application that runs on Java and I didn't see any presets in the /etc/jailkit/jk_init.ini file that included Java.  In this case, I am using openjdk7. How would I go about making a jail that gives access to the JVM?

~Greg