[Jailkit-dev] proposal for new jk_init functionality

[Olivier Sessink]

Hi all,

in some situations it can be required to keep the ownership of files the 
same while copying them into the jail. For example a daemon that uses a 
file or directory to store current sessions. The current jk_init config 
file format does not allow to specify this.

I was thinking of replacing the old format (example):

--------
[mysection]
executables = /bin/bash
regularfiles = /etc/bashrc
libraries = /lib/mylib.so
directories = /etc/terminfo
--------

with a new format (example):

--------
[mysection]
path =  /bin/bash,  /etc/bashrc, /lib/mylib.so, /etc/terminfo
path_w_owner = /var/lib/mydaemon/
allow_setuid = /var/lib/mydaemon/some_file_with_setuid_permissions
--------

this would copy files within /var/lib/mydaemon/ with their current 
ownership, keep the setuid permissions on 
/var/lib/mydaemon/some_file_with_setuid_permissions and for the rest it 
is the same as the above example.

is this a clear config file format? Can it do all the tricks you like to 
do with it?


regards,
Olivier