| commit | author | age | ||
| cb8c86 | 1 | [ldconfig] |
| W | 2 | executables = /sbin/ldconfig |
| 3 | regularfiles = /etc/ld.so.conf | |
| 4 | ||
| 5 | [uidbasics] | |
| 6 | comment = common files for all jails that need user/group information | |
| 7 | libraries = /lib/libnsl.so.1, /lib64/libnsl.so.1, /lib/libnss*.so.2, /lib64/libnss*.so.2 | |
| 8 | regularfiles = /etc/nsswitch.conf | |
| 9 | includesections = ldconfig | |
| 10 | ||
| 11 | [netbasics] | |
| 12 | comment = common files for all jails that need any internet connectivity | |
| 13 | libraries = /lib/libnss_dns.so.2, /lib64/libnss_dns.so.2 | |
| 14 | regularfiles = /etc/resolv.conf, /etc/host.conf, /etc/hosts, /etc/protocols | |
| 15 | ||
| 16 | [logbasics] | |
| 17 | comment = timezone information | |
| 18 | regularfiles = /etc/localtime | |
| 19 | need_logsocket = 1 | |
| 20 | ||
| 21 | [jk_lsh] | |
| 22 | comment = Jailkit limited shell | |
| 23 | executables = /usr/sbin/jk_lsh | |
| 24 | regularfiles = /etc/jailkit/jk_lsh.ini | |
| 25 | users = root | |
| 26 | groups = root | |
| 27 | need_logsocket = 1 | |
| 28 | includesections = uidbasics | |
| 29 | ||
| 30 | [limitedshell] | |
| 31 | comment = alias for jk_lsh | |
| 32 | includesections = jk_lsh | |
| 33 | ||
| 34 | [cvs] | |
| 35 | comment = Concurrent Versions System | |
| 36 | executables = /usr/bin/cvs | |
| 37 | devices = /dev/null | |
| 38 | ||
| 39 | [git] | |
| 40 | comment = Fast Version Control System | |
| 41 | executables = /usr/bin/git* | |
| 42 | directories = /usr/share/git-core | |
| 43 | includesections = editors | |
| 44 | ||
| 45 | [scp] | |
| 46 | comment = ssh secure copy | |
| 47 | executables = /usr/bin/scp | |
| 48 | includesections = netbasics, uidbasics | |
| 49 | devices = /dev/urandom | |
| 50 | ||
| 51 | [sftp] | |
| 52 | comment = ssh secure ftp | |
| 53 | executables = /usr/lib/sftp-server, /usr/libexec/openssh/sftp-server, /usr/lib/misc/sftp-server, /usr/libexec/sftp-server | |
| 54 | includesections = netbasics, uidbasics | |
| 55 | devices = /dev/urandom, /dev/null | |
| 56 | ||
| 57 | [ssh] | |
| 58 | comment = ssh secure shell | |
| 59 | executables = /usr/bin/ssh | |
| 60 | includesections = netbasics, uidbasics | |
| 61 | devices = /dev/urandom, /dev/tty | |
| 62 | ||
| 63 | [rsync] | |
| 64 | executables = /usr/bin/rsync | |
| 65 | includesections = netbasics, uidbasics | |
| 66 | ||
| 67 | [procmail] | |
| 68 | comment = procmail mail delivery | |
| 69 | executables = /usr/bin/procmail, /bin/sh | |
| 70 | devices = /dev/null | |
| 71 | ||
| 72 | [basicshell] | |
| 73 | comment = bash based shell with several basic utilities | |
| 74 | executables = /bin/sh, /bin/bash, /bin/ls, /bin/cat, /bin/chmod, /bin/mkdir, /bin/cp, /bin/cpio, /bin/date, /bin/dd, /bin/echo, /bin/egrep, /bin/false, /bin/fgrep, /bin/grep, /bin/gunzip, /bin/gzip, /bin/ln, /bin/ls, /bin/mkdir, /bin/mktemp, /bin/more, /bin/mv, /bin/pwd, /bin/rm, /bin/rmdir, /bin/sed, /bin/sh, /bin/sleep, /bin/sync, /bin/tar, /bin/touch, /bin/true, /bin/uncompress, /bin/zcat | |
| 75 | regularfiles = /etc/motd, /etc/issue, /etc/bash.bashrc, /etc/bashrc, /etc/profile | |
| 76 | #directories = | |
| 77 | users = root | |
| 78 | groups = root | |
| 79 | includesections = uidbasics | |
| 80 | ||
| 81 | [midnightcommander] | |
| 82 | comment = Midnight Commander | |
| 83 | executables = /usr/bin/mc, /usr/bin/mcedit, /usr/bin/mcview | |
| 84 | directories = /etc/terminfo, /usr/share/terminfo, /usr/share/mc | |
| 85 | includesections = basicshell | |
| 86 | ||
| 87 | [extendedshell] | |
| 88 | comment = bash shell including things like awk, bzip, tail, less | |
| 89 | executables = /usr/bin/awk, /bin/bzip2, /bin/bunzip2, /usr/bin/ldd, /usr/bin/less, /usr/bin/clear, /usr/bin/cut, /usr/bin/du, /usr/bin/find, /usr/bin/head, /usr/bin/md5sum, /usr/bin/nice, /usr/bin/sort, /usr/bin/tac, /usr/bin/tail, /usr/bin/tr, /usr/bin/wc, /usr/bin/watch, /usb/bin/whoami | |
| 90 | includesections = basicshell, midnightcommander, editors | |
| 91 | ||
| 92 | [editors] | |
| 93 | comment = joe and nano | |
| 94 | executables = /usr/bin/joe, /usr/bin/nano, /usr/bin/vi, /usr/bin/vim | |
| 95 | regularfiles = /etc/vimrc | |
| 96 | directories = /etc/joe, /etc/terminfo, /usr/share/vim, /usr/share/terminfo, /usr/lib/terminfo | |
| 97 | ||
| 98 | [netutils] | |
| 99 | comment = several internet utilities like wget, ftp, rsync, scp, ssh | |
| 100 | executables = /usr/bin/wget, /usr/bin/lynx, /usr/bin/ftp, /usr/bin/host, /usr/bin/rsync, /usr/bin/smbclient | |
| 101 | includesections = netbasics, ssh, sftp, scp | |
| 102 | ||
| 103 | [apacheutils] | |
| 104 | comment = htpasswd utility | |
| 105 | executables = /usr/bin/htpasswd | |
| 106 | ||
| 107 | [extshellplusnet] | |
| 108 | comment = alias for extendedshell + netutils + apacheutils | |
| 109 | includesections = extendedshell, netutils, apacheutils | |
| 110 | ||
| 111 | [openvpn] | |
| 112 | comment = jail for the openvpn daemon | |
| 113 | executables = /usr/sbin/openvpn | |
| 114 | users = root,nobody | |
| 115 | groups = root,nogroup | |
| 116 | includesections = netbasics | |
| 117 | devices = /dev/urandom, /dev/random, /dev/net/tun | |
| 118 | includesections = netbasics, uidbasics | |
| 119 | need_logsocket = 1 | |
| 120 | ||
| 121 | [apache] | |
| 122 | comment = the apache webserver, very basic setup, probably too limited for you | |
| 123 | executables = /usr/sbin/apache2 | |
| 124 | users = root, apache | |
| 125 | groups = root, apache | |
| 126 | includesections = netbasics, uidbasics | |
| 127 | ||
| 128 | [perl] | |
| 129 | comment = the perl interpreter and libraries | |
| 130 | executables = /usr/bin/perl | |
| 131 | directories = /usr/lib/perl, /usr/lib/perl5, /usr/share/perl, /usr/share/perl5 | |
| 132 | ||
| 133 | [xauth] | |
| 134 | comment = getting X authentication to work | |
| 135 | executables = /usr/bin/X11/xauth | |
| 136 | regularfiles = /usr/X11R6/lib/X11/rgb.txt, /etc/ld.so.conf | |
| 137 | ||
| 138 | [xclients] | |
| 139 | comment = minimal files for X clients | |
| 140 | regularfiles = /usr/X11R6/lib/X11/rgb.txt | |
| 141 | includesections = xauth | |
| 142 | ||
| 143 | [vncserver] | |
| 144 | comment = the VNC server program | |
| 145 | executables = /usr/bin/Xvnc, /usr/bin/Xrealvnc | |
| 146 | directories = /usr/X11R6/lib/X11/fonts/ | |
| 147 | includesections = xclients | |
| 148 | ||
| 149 | ||
| 150 | #[xterm] | |
| 151 | #comment = xterm | |
| 152 | #executables = /usr/bin/X11/xterm | |
| 153 | #directories = /usr/share/terminfo, /etc/terminfo | |
| 154 | #devices = /dev/pts/0, /dev/pts/1, /dev/pts/2, /dev/pts/3, /dev/pts/4, /dev/ptyb4, /dev/ptya4, /dev/tty, /dev/tty0, /dev/tty4 | |
