Re: [Jailkit-users] Jailkit howto for Mac OS X?

[Olivier Sessink]

Rich Morin wrote:
> The Jailkit howto has a number of details which don't match the
> way things are set up on Mac OS X.  If someone would be willing
> to provide OS-specific details, I'd be happy to write them up.
[..]

>   *  The provided jk_init.ini file does not appear to have any
>      configuration to OSX or Ruby.

the examples in the default jk_init.ini are created on a Debian Linux
system indeed.

[..]

> However, this still seems to leave the program with the ability
> to send off arbitrary packets to other processes, etc.  How can
> I restrict this?

a chroot cannot prevent this. It only restricts file access and nothing
more. you need full virtualization if you want to separate processes 100%.

Olivier