wiki:experiences:igraltist:jail_portmap [RSBAC: Extending Linux Security Beyond the Limits]

Releases

Current version
Git/Latestdiff: 1.5.6

Latest Snapshots
Produced after each commit or rebase to new upstream version

GIT clone e.g. at git://git.rsbac.org/linux-6.18.y

GIT Web at GitHub and Launchpad

Events

No events planned

This is an old revision of the document!

--- portmap_org	2008-07-14 04:58:03.000000000 +0200
+++ portmap	2008-07-05 03:36:52.000000000 +0200
@@ -11,7 +11,7 @@
 
 start() {
 	ebegin "Starting portmap"
-	start-stop-daemon --start --quiet --exec /sbin/portmap -- ${PORTMAP_OPTS}
+	run-jail portmap start-stop-daemon --start --quiet --exec /sbin/portmap -- ${PORTMAP_OPTS}
 	local ret=$?
 	eend ${ret}
 	# without, if a service depending on portmap is started too fast,

cat /etc/rsbac/jail/portmap
;
; RSBAC JAIL definition for portmap
; 20051127
;
 
""
"0.0.0.0"
(allow-dev-read
 allow-dev-write
 allow-external-ipc)
()
()
()

This is execute now:
rsbac_jail  -d -D -i start-stop-daemon  --start --quiet --exec /sbin/portmap -- -l -i 127.0.0.1

//