1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
# This is the sample configuration file provided for the Debian jailer
# package. Please note that the configuration for 'bind' and 'ntp'
# have not been thoroughly tested and might not work "out of the box".
# The end of the file provides a sample configuration section
# (commented out) with a description of all the available options.
# For more information please see jailer.conf(5).
#
# - Javier Fernandez-Sanguino Thu, 29 Aug 2002 16:50:42 +0200
<general>
# This section provides the default for options when not mentioned
# explicitly under a given section.
Junk: /usr/doc/* /usr/man/* /usr/share/man/* /usr/share/doc/* /etc/init.d/* /usr/share/zoneinfo/* /sbin/ldconfig.new /etc/*
</general>
<ntp>
Root: /var/chroot/ntp
Debs: ntp
Conf: /etc/ntp.conf
Extra: /dev/null /etc/hosts /etc/resolv.conf /etc/nsswitch.conf
</ntp>
<bind>
Root: /var/chroot/bind
Conf: /etc/bind/*
Debs: bind
Junk-Debs: tcpd arpd
Extra: /dev/null /dev/log
Junk: /usr/share/* /sbin/* /usr/sbin/arp /usr/sbin/arping /usr/sbin/inetd /usr/sbin/ipautofw /usr/sbin/ipmasqadm /usr/sbin/tzconfig /usr/sbin/update-inetd /usr/sbin/zic /usr/lib/* /bin/* /usr/bin/tzselect /usr/bin/ldd /usr/bin/getent /usr/bin/zdump /lib/libwrap* /lib/libm* /lib/libcrypt* /lib/libthread* /lib/libutil* /lib/librt* /lib/libpthread* /lib/libnss* /lib/libdb* /lib/libdl* /lib/libBrokenLocale* /lib/libnsl* /lib/libSegFault* /lib/libresolv* /usr/sbin/iconv /usr/sbin/local /usr/bin/rpc* /usr/bin/trace*
</bind>
# Sample jail configuration
# -------------------------
#<jail1>
# Field separators are spaces and empty options should be removed.
#
#Root: /path/to/the/root1
#
#Debs: deb1 deb2 deb3
# Debian packages that will be installed in the jail, dependencies
# are automatically taken care of
#
#Junk: /junk1 /junk2 /ju/nk/3
# Files that will not be installed, full path is needed.
# (wildcards can be used here)
#
#Junk-Debs: deb1 deb2 deb3
# Debian packages that are part of the dependencies but will not be installed.
#
#Extra: /ex/tr/a/1/* /extra2 /extr/a3
# Additional files that will be included in the jail
#
#Links: /file1<=>/link1 /fil/e2<=>/lin/k2
# Symlinks that will be created in the jail.
#
#Conf: /etc/my/*
# Configuration files that will be copied to the jail, if the file
# already exists it will not be overwritten.
#</jail1>
|
