commit | author | age
|
61d290
|
1 |
[uidbasics] |
D |
2 |
# this section probably needs adjustment on 64bit systems |
|
3 |
# or non-Linux systems |
|
4 |
comment = common files for all jails that need user/group information |
|
5 |
libraries = /lib/libnsl.so.1, /lib64/libnsl.so.1, /lib/libnss*.so.2, /lib64/libnss*.so.2 |
ce7006
|
6 |
regularfiles = /etc/nsswitch.conf, /etc/ld.so.conf |
61d290
|
7 |
|
D |
8 |
[netbasics] |
|
9 |
comment = common files for all jails that need any internet connectivity |
|
10 |
libraries = /lib/libnss_dns.so.2, /lib64/libnss_dns.so.2 |
|
11 |
regularfiles = /etc/resolv.conf, /etc/host.conf, /etc/hosts, /etc/protocols |
|
12 |
|
|
13 |
[logbasics] |
|
14 |
comment = timezone information |
|
15 |
regularfiles = /etc/localtime |
|
16 |
need_logsocket = 1 |
|
17 |
|
|
18 |
[jk_lsh] |
|
19 |
comment = Jailkit limited shell |
|
20 |
executables = /usr/sbin/jk_lsh |
|
21 |
regularfiles = /etc/jailkit/jk_lsh.ini |
|
22 |
users = root |
|
23 |
groups = root |
|
24 |
need_logsocket = 1 |
|
25 |
includesections = uidbasics |
|
26 |
|
|
27 |
[limitedshell] |
|
28 |
comment = alias for jk_lsh |
|
29 |
includesections = jk_lsh |
|
30 |
|
|
31 |
[cvs] |
|
32 |
comment = Concurrent Versions System |
|
33 |
executables = /usr/bin/cvs |
|
34 |
devices = /dev/null |
|
35 |
|
|
36 |
[git] |
|
37 |
comment = Fast Version Control System |
|
38 |
executables = /usr/bin/git* |
|
39 |
directories = /usr/share/git-core |
|
40 |
includesections = editors |
|
41 |
|
|
42 |
[scp] |
|
43 |
comment = ssh secure copy |
|
44 |
executables = /usr/bin/scp |
|
45 |
includesections = netbasics, uidbasics |
|
46 |
devices = /dev/urandom |
|
47 |
|
|
48 |
[sftp] |
|
49 |
comment = ssh secure ftp |
|
50 |
executables = /usr/lib/sftp-server, /usr/libexec/openssh/sftp-server, /usr/lib/misc/sftp-server, /usr/libexec/sftp-server |
|
51 |
includesections = netbasics, uidbasics |
|
52 |
devices = /dev/urandom, /dev/null |
|
53 |
|
|
54 |
[ssh] |
|
55 |
comment = ssh secure shell |
|
56 |
executables = /usr/bin/ssh |
|
57 |
includesections = netbasics, uidbasics |
|
58 |
devices = /dev/urandom, /dev/tty |
|
59 |
|
|
60 |
[rsync] |
|
61 |
executables = /usr/bin/rsync |
|
62 |
includesections = netbasics, uidbasics |
|
63 |
|
|
64 |
[procmail] |
|
65 |
comment = procmail mail delivery |
|
66 |
executables = /usr/bin/procmail, /bin/sh |
|
67 |
devices = /dev/null |
|
68 |
|
|
69 |
[basicshell] |
|
70 |
comment = bash based shell with several basic utilities |
|
71 |
executables = /bin/sh, /bin/bash, /bin/ls, /bin/cat, /bin/chmod, /bin/mkdir, /bin/cp, /bin/cpio, /bin/date, /bin/dd, /bin/echo, /bin/egrep, /bin/false, /bin/fgrep, /bin/grep, /bin/gunzip, /bin/gzip, /bin/ln, /bin/ls, /bin/mkdir, /bin/mktemp, /bin/more, /bin/mv, /bin/pwd, /bin/rm, /bin/rmdir, /bin/sed, /bin/sh, /bin/sleep, /bin/sync, /bin/tar, /bin/touch, /bin/true, /bin/uncompress, /bin/zcat |
|
72 |
regularfiles = /etc/motd, /etc/issue, /etc/bash.bashrc, /etc/bashrc, /etc/profile |
|
73 |
directories = /usr/lib/locale/en_US.utf8 |
|
74 |
users = root |
|
75 |
groups = root |
|
76 |
includesections = uidbasics |
|
77 |
|
|
78 |
[midnightcommander] |
|
79 |
comment = Midnight Commander |
|
80 |
executables = /usr/bin/mc, /usr/bin/mcedit, /usr/bin/mcview |
|
81 |
directories = /etc/terminfo, /usr/share/terminfo, /usr/share/mc |
|
82 |
includesections = basicshell |
|
83 |
|
|
84 |
[extendedshell] |
|
85 |
comment = bash shell including things like awk, bzip, tail, less |
ce7006
|
86 |
executables = /usr/bin/awk, /usr/bin/bzip2, /usr/bin/bunzip2, /usr/bin/ldd, /usr/bin/less, /usr/bin/clear, /usr/bin/cut, /usr/bin/du, /usr/bin/find, /usr/bin/head, /usr/bin/less, /usr/bin/md5sum, /usr/bin/nice, /usr/bin/sort, /usr/bin/tac, /usr/bin/tail, /usr/bin/tr, /usr/bin/sort, /usr/bin/wc, /usr/bin/watch, /usr/bin/whoami |
61d290
|
87 |
includesections = basicshell, midnightcommander, editors |
D |
88 |
|
|
89 |
[editors] |
|
90 |
comment = vim, joe and nano |
ce7006
|
91 |
executables = /usr/bin/joe, /usr/bin/nano, /usr/bin/vi, /usr/bin/vim, /usr/bin/pico |
61d290
|
92 |
regularfiles = /etc/vimrc |
D |
93 |
directories = /etc/joe, /etc/terminfo, /usr/share/vim, /usr/share/terminfo, /lib/terminfo |
|
94 |
|
|
95 |
[netutils] |
|
96 |
comment = several internet utilities like wget, ftp, rsync, scp, ssh |
|
97 |
executables = /usr/bin/wget, /usr/bin/lynx, /usr/bin/ftp, /usr/bin/host, /usr/bin/rsync, /usr/bin/smbclient |
|
98 |
includesections = netbasics, ssh, sftp, scp |
|
99 |
|
|
100 |
[apacheutils] |
|
101 |
comment = htpasswd utility |
|
102 |
executables = /usr/bin/htpasswd |
|
103 |
|
|
104 |
[extshellplusnet] |
|
105 |
comment = alias for extendedshell + netutils + apacheutils |
|
106 |
includesections = extendedshell, netutils, apacheutils |
|
107 |
|
|
108 |
[openvpn] |
|
109 |
comment = jail for the openvpn daemon |
|
110 |
executables = /usr/sbin/openvpn |
|
111 |
users = root,nobody |
|
112 |
groups = root,nogroup |
|
113 |
includesections = netbasics |
|
114 |
devices = /dev/urandom, /dev/random, /dev/net/tun |
|
115 |
includesections = netbasics, uidbasics |
|
116 |
need_logsocket = 1 |
|
117 |
|
|
118 |
[apache] |
|
119 |
comment = the apache webserver, very basic setup, probably too limited for you |
|
120 |
executables = /usr/sbin/apache |
|
121 |
users = root, www-data |
|
122 |
groups = root, www-data |
|
123 |
includesections = netbasics, uidbasics |
|
124 |
|
|
125 |
[perl] |
|
126 |
comment = the perl interpreter and libraries |
|
127 |
executables = /usr/bin/perl |
|
128 |
directories = /usr/lib/perl, /usr/lib/perl5, /usr/share/perl, /usr/share/perl5 |
|
129 |
|
|
130 |
[xauth] |
|
131 |
comment = getting X authentication to work |
|
132 |
executables = /usr/bin/X11/xauth |
|
133 |
regularfiles = /usr/X11R6/lib/X11/rgb.txt, /etc/ld.so.conf |
|
134 |
|
|
135 |
[xclients] |
|
136 |
comment = minimal files for X clients |
|
137 |
regularfiles = /usr/X11R6/lib/X11/rgb.txt |
|
138 |
includesections = xauth |
|
139 |
|
|
140 |
[vncserver] |
|
141 |
comment = the VNC server program |
|
142 |
executables = /usr/bin/Xvnc, /usr/bin/Xrealvnc |
|
143 |
directories = /usr/X11R6/lib/X11/fonts/ |
|
144 |
includesections = xclients |
|
145 |
|
|
146 |
|
|
147 |
#[xterm] |
|
148 |
#comment = xterm |
|
149 |
#executables = /usr/bin/X11/xterm |
|
150 |
#directories = /usr/share/terminfo, /etc/terminfo |
|
151 |
#devices = /dev/pts/0, /dev/pts/1, /dev/pts/2, /dev/pts/3, /dev/pts/4, /dev/ptyb4, /dev/ptya4, /dev/tty, /dev/tty0, /dev/tty4 |