jails and X forwarding

2014-03-21 Thread Randy Schultz
Hiya, I am trying to allow a jail to do X forwarding ala ssh -Y, but seem to be missing something. I have narrowed it down to something with the jail, having successfully done this with non-jails. IOW, sshd_config has "X11Forwarding yes" etc. The system is fbsd 9.2-STABLE. The jail is set up

RE: jails and X forwarding

2014-03-21 Thread Randy Schultz
On Fri, 21 Mar 2014, dte...@freebsd.org wrote: -} -}> I am trying to allow a jail to do X forwarding ala ssh -Y, but seem to be -}missing -}> something. I have narrowed it down to something with the jail, having -}> successfully done this with non-jails. IOW, sshd_config has -}"X11Forwarding -}>

security bug or operator "misunderstanding", and a query

2007-08-15 Thread Randy Schultz
Hey all, I've been messing around with, and liking, jails. I had a weird thing happen tho' that I cannot explain, and seems to violate the concept of jail. I have the AMD64 version of fbsd 6.2 set up, default install(plus a few minor ports like sudo). The jail setup is AFAIK standard, e.g. rc.

Re: security bug or operator "misunderstanding", and a query

2007-08-18 Thread Randy Schultz
On Wed, 15 Aug 2007, Bill Moran spaketh thusly: -}In response to Randy Schultz <[EMAIL PROTECTED]>: -} -}> Hey all, -}> -}> I've been messing around with, and liking, jails. I had a weird thing happen -}> tho' that I cannot explain, and seems to violate the concept

djbdns on 1270.0.1 in a jail problem

2007-10-01 Thread Randy Schultz
Heya, Playing around with jails and have run across something weird, I was wondering if somebody could explain. I'm trying to get djbdns to run inside the jail, with tinydns running on 127.0.0.1. The thing I cannot figure out is why tinydns always comes up on the jail's IP address, and not lo

Re: djbdns on 1270.0.1 in a jail problem

2007-10-01 Thread Randy Schultz
On Tue, 2 Oct 2007, Alain Wolf spaketh thusly: -}Hi Randy, -} -}I fell in the same hole on my first setup. -}There is no such thing as 127.0.0.1 in a FreeBSD Jail. -}There is just the IP, which the Jail is configured for. -}I am not a developer, but as far as I understand, a Jail and its IP, is -}

jailed time

2007-10-24 Thread Randy Schultz
Has anybody ever set up a time server in a jail? My goal is to have something serving the time, not actually setting the time, out of the jail. The system clock is sync'd via other means. Unfortunately, ntpd and crew really want to mess with the system clock. -- Randy([EMAIL PROTECTED])

ypserv in a jail?

2008-04-17 Thread Randy Schultz
Anybody ever set up a NIS server in a jail? I'm running a jail on a 6.2 system. When I run ypserv on the parent things work great. When I shut down ypserv on the parent and bring it up in the jail, it comes up fine but never answers any of the broadcasts. I have ruled out any firewalling. I h

visudo non-functional in 7.0-RELEASE jail

2008-07-29 Thread Randy Schultz
Heya, Been using jails for a while with 6.2 and 6.3. Today I'm working my first lab box with 7.0-RELEASE. Set everything up with ezjail, e.g. ezjail-admin create... Everything builds/installs fine, no barks. Sudo installed via make install in /usr/ports/security/sudo on both parent and jail a

Re: Mail delivery failed: returning message to sender

2008-07-29 Thread Randy Schultz
On Tue, 29 Jul 2008, Boris Samorodov spaketh thusly: -}Sorry freebsd-jail-list reader, -} -} -}this message is for Randy Schultz. -} -}Dear Randy, just FYI, but your mail server is blocking messages... Taking this off-line. Tnx Boris. -} -} -}On Tue, 29 Jul 2008 22:58:22 +0400 Mail Delivery

Re: visudo non-functional in 7.0-RELEASE jail

2008-07-30 Thread Randy Schultz
On Wed, 30 Jul 2008, Edwin Groothuis spaketh thusly: -}Since lock_file() consists of three different functions depending -}on your capabilities, could you pastebin the output of your config.log -}somwwhere to figure out which was is used? http://www.pastebin.be/13079 -} -}I have visudo (and sudo

request for (security) comments on this setup

2008-09-22 Thread Randy Schultz
Heya, I'm mounting some iSCSI storage in a jail. It's mounting in the jail via fstab.. When the jail is up and I'm logged into the jail I can cd to the mount point, r/w etc., everything seems to work. What's weird tho' is, while a df on the parent shows the partion mounted as expected, a df in

Re: request for (security) comments on this setup

2008-09-22 Thread Randy Schultz
On Mon, 22 Sep 2008, Bjoern A. Zeeb spaketh thusly: -}On Mon, 22 Sep 2008, Randy Schultz wrote: -} -}Hi, -} -}> I'm mounting some iSCSI storage in a jail. It's mounting in the jail via -}> fstab.. When the jail is up and I'm logged into the jail I can cd -}> to