Re: running services in their own little world

2004-07-31 Thread Sam Vilain
hanasaki wrote: Any package in Debian that will automatically run all /etc/init.d based deamons in jail / chroot? Whilst it is not automatic, you may wish to investigate the Linux vserver project; http://www.linux-vserver.net/ There is a package in Debian for it (util-vserver, and kernel-patc

Re: running services in their own little world

2004-07-26 Thread Milan P. Stanic
On Mon, Jul 26, 2004 at 11:21:24PM +1000, Russell Coker wrote: > Adding a new LSM module is like adding a new device driver, people who choose > not to use it will not even notice it's there, so there's nothing stopping > Linus from adding them at any time. LIDS patch is actually LSM module and

Re: running services in their own little world

2004-07-26 Thread Russell Coker
On Mon, 26 Jul 2004 22:43, "Milan P. Stanic" <[EMAIL PROTECTED]> wrote: > > If so when will the patch be submitted to Linus? > > Who knows? These days patches doesn't get accepted so easy :-( The SE Linux patches get accepted easily enough. Most of the 2.6.x kernels have had SE Linux changes in

Re: running services in their own little world

2004-07-26 Thread Milan P. Stanic
On Mon, Jul 26, 2004 at 01:36:37PM +1000, Russell Coker wrote: > LIDS used to be in the LSM kernel patch, but got removed before LSM > was merged into 2.6.x because it wasn't being maintained. > Is LIDS being maintained again? It is maintained and developed actively again, for now. On the http:/

Re: running services in their own little world

2004-07-25 Thread Russell Coker
On Mon, 26 Jul 2004 07:06, "Milan P. Stanic" <[EMAIL PROTECTED]> wrote: > On Sun, Jul 25, 2004 at 11:02:54AM +1000, Russell Coker wrote: > > On Sun, 25 Jul 2004 02:43, hanasaki <[EMAIL PROTECTED]> wrote: > > > The idea is to run bind, http and other servers in a jail.  I am just > > > getting start

Re: running services in their own little world

2004-07-25 Thread Milan P. Stanic
On Sun, Jul 25, 2004 at 11:02:54AM +1000, Russell Coker wrote: > On Sun, 25 Jul 2004 02:43, hanasaki <[EMAIL PROTECTED]> wrote: > > The idea is to run bind, http and other servers in a jail.  I am just > > getting started and know little about it, for now.  I was hoping that > > there were Debian p

Re: running services in their own little world

2004-07-24 Thread Russell Coker
On Sun, 25 Jul 2004 02:43, hanasaki <[EMAIL PROTECTED]> wrote: > The idea is to run bind, http and other servers in a jail.  I am just > getting started and know little about it, for now.  I was hoping that > there were Debian packages that already provided the jail(s) to run > these services in.

Re: running services in their own little world

2004-07-24 Thread Karsten M. Self
on Sat, Jul 24, 2004 at 11:43:39AM -0500, hanasaki ([EMAIL PROTECTED]) wrote: > Steve Suehring wrote: > >*All* services in /etc/init.d? Do you mean /etc/inetd.conf services? > >Could you narrow down the services that you'd like to chroot? Some > >services are fairly trivial to chroot while othe

Re: running services in their own little world

2004-07-24 Thread hanasaki
The idea is to run bind, http and other servers in a jail. I am just getting started and know little about it, for now. I was hoping that there were Debian packages that already provided the jail(s) to run these services in. thanks. Steve Suehring wrote: *All* services in /etc/init.d? Do you mea

Re: running services in their own little world

2004-07-23 Thread Steve Suehring
*All* services in /etc/init.d? Do you mean /etc/inetd.conf services? Could you narrow down the services that you'd like to chroot? Some services are fairly trivial to chroot while others are more involved and require some thought before dumping into a chroot. You might have a look at makejai

Re: running services in their own little world

2004-07-23 Thread Daniel Pittman
On 24 Jul 2004, [EMAIL PROTECTED] wrote: > Any package in Debian that will automatically run all /etc/init.d based > deamons in jail / chroot? No, because it is not possible to provide a generic solution to running daemons under a chroot, for a variety of reasons. Regards, Daniel -- Natu