[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Jailkit-dev] Wildcarded allowed jails
From: |
Fred Cox |
Subject: |
Re: [Jailkit-dev] Wildcarded allowed jails |
Date: |
Mon, 26 Apr 2010 14:03:25 -0700 (PDT) |
For this stage of development, it's a single user, but we likely will have
multiple users soon. At that time, I will likely need to make it so that the
jk_uchroot.ini allows specification by group as well as user.
As to the glob proposal, that works for me. I was trying to open the
permissions as little as possible for my purposes.
If I produce a patch using glob, would it be incorporated into your sources?
Thanks,
Fred
----- Original Message ----
From: Olivier Sessink <address@hidden>
To: address@hidden
Sent: Sun, April 25, 2010 11:39:45 AM
Subject: Re: [Jailkit-dev] Wildcarded allowed jails
Fred Cox wrote:
> Currently, jk_uchroot.ini doesn't allow a wildcard for the
> allowed_jails.
>
> Our application requires us to dynamically generate a jail directory,
> then allow the user to be jailed to the new directory.
is it a single user that may chroot into many jails?
> Either we need to dynamically changes jk_uchroot.ini, or we need
> entries like this:
>
> allowed_jails = /home/chrootusers/*
>
> Please find attached a patch that does this.
>
> Thoughts?
dirs_equal() is also used in other jailkit utilities. I think glob() would be a
much better solution (and it would allow /foo/*/bar/) .
Olivier
_______________________________________________
Jailkit-dev mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-dev