https://github.com/kazuho/jailing

super-easy chroot jail builder/runner for Linux
https://github.com/kazuho/jailing

Last synced: about 2 months ago
JSON representation

super-easy chroot jail builder/runner for Linux

• Host: GitHub
• URL: https://github.com/kazuho/jailing
• Owner: kazuho
• Created: 2015-05-13T07:12:35.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2021-06-01T07:05:47.000Z (over 3 years ago)
• Last Synced: 2024-07-02T18:08:47.963Z (3 months ago)
• Language: Perl
• Homepage:
• Size: 23.4 KB
• Stars: 165
• Watchers: 14
• Forks: 10
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
jailing

=======

Jailing is a minimalistic, super-easy chroot jail builder/runner script.

It is by no means a container service, or tries to be.

It is a helper tool for running a program under a restricted environment, preventing it from making changes to other parts of the host even if gets cracked.

__When invoked, it automatically setups the chroot environment by doing the following, and then executes the given command within the environment.__

- __remount system directories as read-only__ under the chroot directory tree

- copy setting files (/etc/passwd, /etc/resolv.conf, etc.)

- drop all capabilities (see [man 7 capabilities](http://man7.org/linux/man-pages/man7/capabilities.7.html))

The tool by default __does NOT expose directories that likely contain user-data__ (e.g. `/usr/local`, `/home`, `/var`).

Such directories should be exported explicitly to the jail by using the `--bind` option.

For example, if you have Apache HTTP server installed under `/usr/local/apache`, and want to run it under a jailed environment, simply run:

```

% sudo jailing --root=/var/httpd-jail --bind /usr/local/apache \

    -- \

    /usr/local/apache/bin/httpd -c /usr/local/apache/conf/httpd.conf

```

For more information, consult `man jailing`.

INSTALLATION

------------

```

% perl Makefile.PL

% make

% sudo make install

```

LICENSE

-------

MIT