jailkit-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Jailkit-users] Disconnects when the shell starts


From: Mathematical
Subject: Re: [Jailkit-users] Disconnects when the shell starts
Date: Thu, 15 May 2008 08:51:22 -0700 (PDT)

ok I think I figured something out. I realize that I dont have to change
/etc/jailkit/jk_lsh.ini because I changed /cvsjail/etc/jailkit/jk_lsh.ini to
show:

[cvsuser]
paths = /usr/bin
executables = /usr/bin/cvs

And that worked. But when I say:

[group cvsusers]
paths = /usr/bin
executables = /usr/bin/cvs

It doesnt work. And yes cvsuser is in the cvsusers group. Do you have any
ideas?

Thank you.



Mathematical wrote:
> 
> Alright so thanks to your help I figured out that the logs are in
> /var/log/messages. As you probably already know I'm some what new to linux
> so bare with me. Here is the result of the command:
> 
> [log]
> address@hidden cvsjail]# grep jk_ /var/log/* 
> /var/log/messages:May 14 13:53:04 localhost jk_chrootsh[14199]: now
> entering jail /cvsjail for user cvsuser (502) 
> /var/log/messages:May 14 13:59:31 localhost jk_chrootsh[14242]: now
> entering jail /cvsjail for user cvsuser (502) 
> /var/log/messages:May 14 13:59:48 localhost jk_chrootsh[14246]: now
> entering jail /cvsjail for user cvsuser (502) 
> /var/log/messages:May 15 08:27:59 localhost jk_socketd[14309]: version
> 2.5, listening on socket /cvsjail/dev/log with rates [1024:10240]/0.500000 
> /var/log/messages:May 15 08:31:53 localhost jk_chrootsh[14326]: now
> entering jail /cvsjail for user cvsuser (502) 
> /var/log/messages:May 15 12:31:53 localhost jk_lsh[14326]: jk_lsh version
> 2.5, started /var/log/messages:May 15 12:31:53 localhost jk_lsh[14326]:
> did neither find a section 'cvsuser', nor 'group cvsuser' nor 'DEFAULT' in
> configfile /etc/jailkit/jk _lsh.ini 
> /var/log/messages:May 15 08:46:37 localhost jk_socketd[14342]: version
> 2.5, listening on socket /cvsjail/dev/log with rates [1024:10240]/0.500000 
> /var/log/messages:May 15 08:47:06 localhost jk_socketd[14346]: version
> 2.5, listening on socket /cvsjail/dev/log with rates [1024:10240]/0.500000 
> [/log]
> 
> After looking at this I opened up the /etc/jailkit/jk_lsh.ini and
> everything was commented out. But I did remember setting it up so I then
> went to /cvsjail/etc/jailkit/jk_lsh.ini and there was my setup: 
> 
> [group cvsusers]
> paths = /usr/bin
> executables = /usr/bin/cvs
> 
> so heres my question do both /etc/jailkit/jk_lsh.ini and
> /cvsjail/etc/jailkit/jk_lsh.ini have to be configured? I didnt even know
> that /etc/jailkit/jk_lsh.ini existed until I saw the logs and nothing in
> the tutorial pointed me to /etc/jailkit/jk_lsh.ini. 
> 
> 
> 
> 
> 
> Olivier Sessink-2 wrote:
>> 
>> Mathematical wrote:
>>> Ok just to be sure that loging works, here is what I did. 
>>> 
>>> My cvsjail is located at /cvsjail so I modified the jk_socketd.ini file
>>> to
>>> look like this:
>>> 
>>> [/cvsjail/dev/log] 
>>> base = 1024 
>>> peek = 10240 
>>> interval = 0.5
>>> 
>>> then I did killall jk_socketd ; jk_socketd
>>> 
>>> and when I attempt to connect this is what I see in my /var/log/secure
>>> 
>>> [secure log]
>>> postponed public key for user cvsuser
>>> accepted public key for user cvsuser
>>> [/secure log]
>>> 
>>> I dont see any thing else. also when I attempt to vi the
>>> /cvsjail/dev/log it
>>> says permission denied and I'm using the root account. Maybe there is
>>> something wrong with my permissions.. here is the relavent..
>> 
>> /dev/log is a socket, you cannot edit a socket
>> 
>> try 'grep jk_ /var/log/*' to see how your syslog is configured where to 
>> store jailkit log messages.
>> 
>> Olivier
>> 
>> 
>> _______________________________________________
>> Jailkit-users mailing list
>> address@hidden
>> http://lists.nongnu.org/mailman/listinfo/jailkit-users
>> 
>> 
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Disconnects-when-the-shell-starts-tp17238286p17256428.html
Sent from the jailkit-users mailing list archive at Nabble.com.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]