RE: Jail question

2013-03-01 Thread Teske, Devin
On Fri, 01 Mar 2013, Bernt Hansson wrote: > On 2013-02-27 11:19, Bernt Hansson wrote: > > > 2013-02-26 15:18, Teske, Devin skrev: > > > > > Yes, this is possible. > > > > > > When I get into work, I'll share with you the recipe > > > > Please do share with us. > > Ok I rephrase my question. Ho

RE: Jail question

2013-02-27 Thread dteske
----- > From: Bernt Hansson [mailto:b...@bananmonarki.se] > Sent: Wednesday, February 27, 2013 2:19 AM > To: Teske, Devin > Cc: questions FreeBSD > Subject: Re: Jail question > > 2013-02-26 15:18, Teske, Devin skrev: > > Yes, this is possible. > > > > When I

Re: Jail question

2013-02-27 Thread Bernt Hansson
2013-02-26 15:18, Teske, Devin skrev: Yes, this is possible. When I get into work, I'll share with you the recipe Please do share with us. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To u

Re: Jail question

2013-02-26 Thread Daniel O'Callaghan
Bernt Hansson wrote: I would like to install an old version of freebsd let's say 4.6 in a jail. Is that possible. Host is 8.3-stable amd64 Things like ps won't run, but you can copy static binaries from host:/rescue to jail:/{bin,sbin} as appropriate and that helps a lot. I just installed a 5

RE: Jail question

2013-02-26 Thread Teske, Devin
Yes, this is possible. When I get into work, I'll share with you the recipe (I have a script called "update4.sh" which I run after building [or rsync'ing] a 4.x box to an 8.x box to become a vimage; note that I didn't say "jail" -- 4.x runs better as a VNET jail than a regular jail). We've not

Re: Jail question

2010-10-18 Thread Ian Smith
In freebsd-questions Digest, Vol 333, Issue 2, Message: 1 On Fri, 15 Oct 2010 13:38:17 -0400 bdsf...@att.net wrote: > On Fri, 15 Oct 2010 09:32:44 -0400, Jerry > wrote: > > > On Fri, 15 Oct 2010 08:35:39 -0400 > > Fbsd8 articulated: > > > >> Check out qjail. It has been submitted for ad

Re: Jail question

2010-10-18 Thread Matthew Law
On Fri, October 15, 2010 2:54 pm, Ivan Voras wrote: > Since jails can do many things there are many "helper" utilities that > can do much to simplify the process. If you can hack python, you can, > for example, modify my script at > http://ivoras.sharanet.org/stuff/mkjails.py which I've used to cr

Re: Jail question

2010-10-18 Thread Jerry
On Fri, 15 Oct 2010 13:38:17 -0400 bdsf...@att.net articulated: > On Fri, 15 Oct 2010 09:32:44 -0400, Jerry > wrote: > > > On Fri, 15 Oct 2010 08:35:39 -0400 > > Fbsd8 articulated: > > > >> Check out qjail. It has been submitted for addition to the ports > >> collection, but the ports dept is

Re: Jail question

2010-10-18 Thread bdsfbsd
On Fri, 15 Oct 2010 09:32:44 -0400, Jerry wrote: On Fri, 15 Oct 2010 08:35:39 -0400 Fbsd8 articulated: Check out qjail. It has been submitted for addition to the ports collection, but the ports dept is very slow in performing their task of adding new ports to the system. So in the mean tim

Re: Jail question

2010-10-18 Thread Ivan Voras
On 10/14/10 18:20, Matthew Law wrote: I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give an attacker carte blanche to the internal nets if it was compromised

Re: Jail question

2010-10-15 Thread Jerry
On Fri, 15 Oct 2010 08:35:39 -0400 Fbsd8 articulated: > Check out qjail. It has been submitted for addition to the ports > collection, but the ports dept is very slow in performing their task > of adding new ports to the system. So in the mean time you can get > qjail from here. http://sourcefo

Re: Jail question

2010-10-15 Thread Fbsd8
Matthew Law wrote: I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give an attacker carte blanche to the internal nets if it was compromised, which makes me ne

Re: Jail question

2010-10-14 Thread krad
On 14 October 2010 19:19, doug wrote: > On Thu, 14 Oct 2010, Matthew Law wrote: > > I have a single box on which I would like to run openvpn, smtp (postfix, >> dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also >> acts as a network gateway so it would give an attacker car

Re: Jail question

2010-10-14 Thread doug
On Thu, 14 Oct 2010, Matthew Law wrote: I have a single box on which I would like to run openvpn, smtp (postfix, dspam, greylist, clamav), imap (dovecot) apache22 and bind. This box also acts as a network gateway so it would give an attacker carte blanche to the internal nets if it was compromi

Re: Jail question

2007-12-17 Thread Peter Schuller
> I want to check the understanding of jails. > > My understanding is a jail uses the existing kernel configuration and > cannot use its own kernel configuration. > > Is this correct? Yes. The jail is being executed by the same kernel as the host system. The jail just has restricted access to cer

Re: jail question

2007-04-26 Thread Roberto Pereyra
Thanks to all!!! roberto 2007/4/26, Karol Kwiatkowski <[EMAIL PROTECTED]>: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roberto Pereyra wrote: > hi > > I running fbsd 6.2 and I would like to my first jail setup, but I have > this error when I start the jail (jail0): > > srv1# /etc/rc.d/jail

Re: jail question

2007-04-26 Thread Karol Kwiatkowski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roberto Pereyra wrote: > hi > > I running fbsd 6.2 and I would like to my first jail setup, but I have > this error when I start the jail (jail0): > > srv1# /etc/rc.d/jail start > Configuring jails:. > Starting jails:ifconfig: interface alias does

Re: jail question

2007-04-26 Thread Duane Hill
On Thu, 26 Apr 2007, Roberto Pereyra wrote: hi I running fbsd 6.2 and I would like to my first jail setup, but I have this error when I start the jail (jail0): srv1# /etc/rc.d/jail start Configuring jails:. Starting jails:ifconfig: interface alias does not exist jail0. srv1# What I do wrong

Re: jail question

2007-02-12 Thread Alain Wolf
On 11.02.2007 12:54, * Dino Vliet wrote: > Hi folks, > > I'm installing a nice system to use as my multimedia > box and already succeeded with geom-mirror. I want to > use a jail to isolate the p2p applications like > amule/emule and want to make sure that they only write > to an encrypted disk (

Re: jail question

2007-02-11 Thread Bill Moran
Dino Vliet <[EMAIL PROTECTED]> wrote: > > Hi folks, > > I'm installing a nice system to use as my multimedia > box and already succeeded with geom-mirror. I want to > use a jail to isolate the p2p applications like > amule/emule and want to make sure that they only write > to an encrypted disk (c

Re: Jail question

2002-12-04 Thread Ruben de Groot
On Wed, Dec 04, 2002 at 02:35:11PM +0100, Paul Everlund typed: > On Wed, 4 Dec 2002, Didier Wiroth wrote: > > > Hey, > > I'm a freebsd newbie. I was experimenting with jails. I've build an > > entire jail under /usr/local/jail/test which I'm accessing through the > > network using ssh. > > > > I t

Re: Jail question

2002-12-04 Thread Paul Everlund
On Wed, 4 Dec 2002, Didier Wiroth wrote: > Hey, > I'm a freebsd newbie. I was experimenting with jails. I've build an > entire jail under /usr/local/jail/test which I'm accessing through the > network using ssh. > > I thought that you can't grep any path or any information outside the > jail but w