Jailkit 2.1 review

License: BSD License File size: 105K Developer: Olivier Sessink

0

Jailkit project is a set of utilities to limit user accounts to specific files using chroot() and or specific commands.

Setting up a chroot shell, a shell limited to some specific command, or a daemon inside a chroot jail is a lot easier using these utilities.

Jailkit is often used on CVS servers (in a chroot and limited to cvs), sftp/scp servers (both in a chroot and limited to sftp/scp as well as not in a chroot but only limited to sftp/scp), and also on general servers with accounts where the shell accounts are in a chroot.

Jailkit is furthermore used to jail daemon processes, for example apache servers, bzflag servers, squid proxy servers, etc.

Installation:

./configure
make
su root
make install

Now copy the startup script to your init directory, on Debian this is cp extra/jailkit /etc/init.d/jailkit

And create the correct symlinks, on Debian you run update-rc.d jailkit defaults

On Red Hat/Fedora systems you run
chkconfig jailkit on

Requirements:
Python

What's New in This Release:
This release has several minor improvements: sub-second intervals for jk_socketd, improved checks in jk_jailuser, improved handling of recursive directories in jk_cp, and a new utility jk_list to list all jailed processes.