Chroot jails made simpler
jk_uchroot
jk_uchroot
sets up users of the main system who can use the chroot. The list of users and which chroots they can use is kept in /etc/jailkit/jk_uchroot.ini
. Some sample entries include:
[jwl] allowed_jails = /srv/johnjail, /srv/commonjail skip_injail_passwd_check = 1 [group users] allowed_jails = /srv/commonjail skip_injail_passwd_check = 1
Notice the optional last line in each entry that skips the password check.
jk_user
Use this utility to move an existing user account into a chroot. If the --move
(-m
) option is used, the user's entire home directory is placed in the chroot's directory /home/USER
. The user will no longer have access to the main system.
jk_procmailwrapper
Not all chroots require email. For those that do, jk_procmailwrapper
runs procmail. For users with access to the main system, it provides access to their normal .procmailrc
file. If procmail is installed within the chroot, jailed users can use the .procmailrc
in their home directory in the chroot.
Buy this article as PDF
(incl. VAT)