Projects / Jailkit

Jailkit

Jailkit is a set of utilities to allow quick creation of limited user accounts in a chroot jail. It contains a safe logging daemon, shells that can restrict users, utilities to start daemons in a chroot jail, and utilities for easy setup of chroot jails.

Tags
Licenses
Operating Systems
Implementation

Recent releases

  •  03 Jan 2014 22:57

    Release Notes: This is a minor bugfix release. It fixes compiling with -lcap on RedHat Enterprise Linux, allows jk_chrootsh to be called -su, improves argument handling and error messages, and makes jk_cp honor the -j option again.

    •  18 Apr 2013 20:26

      Release Notes: This is a minor bugfix release. It has fixes to compile if -pthread and -lcap are both needed, fixes for a bug in an environment cleaning function, improvements for jk_init.ini for some 64bit Linux distributions, and improved error messages.

      •  07 Jun 2012 21:32

        Release Notes: This minor feature enhancement release handles symlinks for /bin, /lib, and /sbin if they point into /usr (as Fedora 17 does) and uses -pthreads instead of -lpthreads, if available, so it will compile on some modern Linux versions.

        •  28 Apr 2011 09:19

          Release Notes: This version fixes an infinite loop in jk_cp and jk_init if ldd output for some reason contains two slashes (//lib/libfoo.so). Furthermore, jk_chrootsh can now be called as "su".

          •  10 Oct 2010 20:49

            Release Notes: This release fixes a regression in the build system of 2.12 that could set the wrong default directory for ini files.

            Recent comments

            20 Jul 2005 14:44 mseaborn

            Software with a similar purpose: Plash

            You might also be interested in Plash, which also creates
            restricted environments for running programs in. Like
            jailkit, you can specify what files a process can access, but
            you don't need to copy the files, so it's more lightweight
            and flexible. You can grant a process read-only or
            read-write access to specific directories, mapped at any
            point in the file namespace.

            http://freshmeat.net/projects/plash/

            Screenshot

            Project Spotlight

            OpenStack4j

            A Fluent OpenStack client API for Java.

            Screenshot

            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.