On Fri, Mar 07, 2008 at 12:51:53PM +0100, [EMAIL PROTECTED] wrote:
> Only a clarification: in order to build a root jail for a single
> user (so not a system wide configuration) what are the steps to
> follow? 

The process is exactly the same...  If you only want to jail one user,
just create a jail anywhere and put the user in it.  You can jail one
or more users without jailing everyone just by editing rssh's config
file, as described in the man page for rssh.conf.  

The section you seem to be referring to is explaining that you can
create ONE JAIL PER USER if you have a compelling need, but:

 - In most cases the need is not really sufficient to justify creating
   separate jails per user; it's a waste of system resources.  It's
   far better to create one jail with separate home directories for
   each user, and just use file system permissions to control what
   each user has access to.

 - If you want logging to work, you'll need to configure syslogd to
   create a logging socket within each and every jail.  The number of
   sockets it can create is usually very limited; see your syslogd(8)
   man page for details of how to do that.

If you really need one jail per user, which I would strongly urge you
not to do, then even in that case the process for setting up a jail is
not any different; i.e. there are never any special options for
mkchroot, there is only one way to set up a jail, no matter how you
intend to use it.

-- 
Derek D. Martin
http://www.pizzashack.org/
GPG Key ID: 0x81CFE75D

Attachment: pgpj6l2H4hMuN.pgp
Description: PGP signature

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
rssh-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rssh-discuss

Reply via email to