Random Notes‎ > ‎

Jailkit Usage

posted Oct 7, 2011, 9:53 AM by William Shallum   [ updated Oct 7, 2011, 9:57 AM ]

Create chroot directory

mkdir /chroot/foo
chown root:root /chroot/foo

Add sets

jk_init -j /chroot/foo <sets>

Possible sets: see /etc/jailkit/jk_init.ini 
Possibly useful: jk_lsh, basicshell, if not even basicshell: uidbasics, netbasics, logbasics

Move users

jk_jailuser -j /chroot/foo <users>

This will update /etc/passwd and set the users' shells to jk_chrootsh

Possible options: -m move homedir instead of copying

Copy more stuff

jk_cp -j /chroot/foo <files/directories>

This will copy any executables with the dependencies.
Possible options: -k hardlink instead of copying, -f force overwrite of stuff, -o retain ownership & permissions

Testing

do not: su - <jaileduser>
do: su <jaileduser>
Comments