On Fri, 22 Nov 2002, Alex Povolotsky wrote:

> On Thu, 21 Nov 2002 15:25:20 -0500 (EST)
> "R. DuFresne" <[EMAIL PROTECTED]> wrote:
> 
> RD> > I'm running FreeBSD, and apache/mod_ssl with virtual hosts in RD> It sounds 
>like yer jail is lacking the libs and devices for this access.
> 
> libs exists; device exists. I'm getting IOCTL error trying to access /dev/ipl.
> 
> Nov 21 20:11:01 class-a tproxy[52225]: ioctl(SIOCGNATL): Bad address
> 
> Maybe, ipfilter requires kmem or mem; in this case, I'm surely helpless. 
> RD> recent system admin editions had a good article on how to work through the
> RD> process of setting up jailed applications I think it was the last months
> RD> or two months back edition.
> 
> URL? I don't think I'll be able to get hold on it in reasonable time... 
> 
> 
> 

If you're in that much of a time pinch hopefully you googled for it
yourself, rather then waiting on me <smile>:

http://www.sysadminmag.com/

Look at the past couple of issues, the article should be in there on
jailing deamons.  Which I did not locate with a quick search on the site
with the term 'jail' yet there were at least 5  articles found with that
term relating to this, at least one specific to freebsd.  Searching with
the term chroot produces more results and between the two, should locate
information to help you here.

Thanks,


Ron DuFresne
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to