wiki:experiences:igraltist:jail_samba
Releases
Current version
Git/Latestdiff: 1.5.5
Latest Snapshots
Produced after each commit or rebase to new upstream version
GIT
RSBAC source code, can be unstable sometimes
Events
No events planned
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
wiki:experiences:igraltist:jail_samba [2008/07/14 02:22] 127.0.0.1 (old revision restored) |
wiki:experiences:igraltist:jail_samba [2008/07/14 02:24] (current) 127.0.0.1 (old revision restored) |
||
|---|---|---|---|
| Line 17: | Line 17: | ||
| eend ${last_result} | eend ${last_result} | ||
| fi | fi | ||
| + | </code> | ||
| + | |||
| + | <code bash> | ||
| + | ; | ||
| + | ; RSBAC JAIL definition for samba | ||
| + | ; 20080507 | ||
| + | ; | ||
| + | ; Tested by igraltist on gentoo | ||
| + | ; | ||
| + | |||
| + | "" | ||
| + | "0.0.0.0" | ||
| + | (allow-dev-write | ||
| + | allow-dev-read | ||
| + | allow-all-net-family | ||
| + | ) | ||
| + | (sys-ptrace | ||
| + | sys-resource | ||
| + | kill | ||
| + | setuid | ||
| + | setgid | ||
| + | net-bind-service | ||
| + | ) | ||
| + | () | ||
| + | (rlimit) | ||
| + | </code> | ||
| + | |||
| + | <code bash> | ||
| + | This is execute now: | ||
| + | rsbac_jail -D -d -n -C SYS_PTRACE SYS_RESOURCE KILL SETUID SETGID NET_BIND_SERVICE -M rlimit start-stop-daemon --start --quiet --exec /usr/sbin/smbd -- -D [ ok ] | ||
| + | * samba -> start: nmbd ... | ||
| + | |||
| + | This is execute now: | ||
| + | rsbac_jail -D -d -n -C SYS_PTRACE SYS_RESOURCE KILL SETUID SETGID NET_BIND_SERVICE -M rlimit start-stop-daemon --start --quiet --exec /usr/sbin/nmbd -- -D [ ok | ||
| </code> | </code> | ||
wiki/experiences/igraltist/jail_samba.1215994943.txt.gz · Last modified: 2008/07/14 02:22 by 127.0.0.1