[Jailkit-users] How to Jail Python Interpreter

[Gregory Piñero]

I want to have either a deamon or long running Python process run
inside of a jail.

Here is what I have done so far but I'm not sure what the next step is:

make directory

$sudo mkdir /srv/jail_for_python

copy Python

$sudo jk_cp jail_for_python/ /usr/bin/python
Creating symlink jail_for_python/usr/bin/python to python2.4
Copying /usr/bin/python2.4 to jail_for_python/usr/bin/python2.4
Creating symlink jail_for_python/lib/tls/i686/cmov/libpthread.so.0 to
libpthread-2.3.6.so
Copying /lib/tls/i686/cmov/libpthread-2.3.6.so to
jail_for_python/lib/tls/i686/cmov/libpthread-2.3.6.so
Creating symlink jail_for_python/lib/tls/i686/cmov/libdl.so.2 to libdl-2.3.6.so
Copying /lib/tls/i686/cmov/libdl-2.3.6.so to
jail_for_python/lib/tls/i686/cmov/libdl-2.3.6.so
Creating symlink jail_for_python/lib/tls/i686/cmov/libutil.so.1 to
libutil-2.3.6.so
Copying /lib/tls/i686/cmov/libutil-2.3.6.so to
jail_for_python/lib/tls/i686/cmov/libutil-2.3.6.so
Creating symlink jail_for_python/lib/tls/i686/cmov/libm.so.6 to libm-2.3.6.so
Copying /lib/tls/i686/cmov/libm-2.3.6.so to
jail_for_python/lib/tls/i686/cmov/libm-2.3.6.so
Creating symlink jail_for_python/lib/tls/i686/cmov/libc.so.6 to libc-2.3.6.so
Copying /lib/tls/i686/cmov/libc-2.3.6.so to
jail_for_python/lib/tls/i686/cmov/libc-2.3.6.so
Creating symlink jail_for_python/lib/ld-linux.so.2 to ld-2.3.6.so
Copying /lib/ld-2.3.6.so to jail_for_python/lib/ld-2.3.6.so

But now what do I do next?  Do I need to add a new user?  Why or why
not?  How do a start a Python program in the jail?  How do I start the
Python interpreter in the jail so I can test it out?

BTW, perhaps jailing an interpreter such as Python, Ruby, or Perl
would make a useful How-to for the website.  I could write it if I
ever reach that level of understanding.

Thanks for the help.

-Greg