> On 19 Nov 2019, at 15:02, mike tancsa <mike at sentex.net> wrote: > > On 11/19/2019 6:42 AM, Ronald Klop wrote: >> Hi, >> >> Is it possible to jexec into a jail as a regular user. Or to enable >> that somewhere? >> Or is the way to do such a thing to set up ssh in the jail? >> > On 11.3 at least, does not the built in functionality of jexec do what > you need ? > > jexec [-l] [-u username | -U username] jail [command ...] > > # jexec -U testuser 3 csh > testuser at cacticonsole:/ % id > uid=1005(testuser) gid=1005(testuser) groups=1005(testuser) > testuser at cacticonsole:/ % >I think he wants to use jexec as a normal user from the main OS. If he wants to run jexec as root and login to jail as user then your command works.
On 11/19/2019 8:09 AM, Christos Chatzaras wrote:> On 19 Nov 2019, at 15:02, mike tancsa <mike at sentex.net> wrote: >> On 11/19/2019 6:42 AM, Ronald Klop wrote: >>> Hi, >>> >>> Is it possible to jexec into a jail as a regular user. Or to enable >>> that somewhere? >>> Or is the way to do such a thing to set up ssh in the jail? >>> >> On 11.3 at least, does not the built in functionality of jexec do what >> you need ? >> >> jexec [-l] [-u username | -U username] jail [command ...] >> >> # jexec -U testuser 3 csh >> testuser at cacticonsole:/ % id >> uid=1005(testuser) gid=1005(testuser) groups=1005(testuser) >> testuser at cacticonsole:/ % >> > I think he wants to use jexec as a normal user from the main OS. > > If he wants to run jexec as root and login to jail as user then your command works.Ahhh, my mistake.? ? A sudo entry then ? ??? ---Mike
Christos Chatzaras wrote on 2019/11/19 14:09:> > >> On 19 Nov 2019, at 15:02, mike tancsa <mike at sentex.net> wrote: >> >> On 11/19/2019 6:42 AM, Ronald Klop wrote: >>> Hi, >>> >>> Is it possible to jexec into a jail as a regular user. Or to enable >>> that somewhere? >>> Or is the way to do such a thing to set up ssh in the jail? >>> >> On 11.3 at least, does not the built in functionality of jexec do what >> you need ? >> >> jexec [-l] [-u username | -U username] jail [command ...] >> >> # jexec -U testuser 3 csh >> testuser at cacticonsole:/ % id >> uid=1005(testuser) gid=1005(testuser) groups=1005(testuser) >> testuser at cacticonsole:/ % >> > > I think he wants to use jexec as a normal user from the main OS. > > If he wants to run jexec as root and login to jail as user then your command works.If you want to use jexec as normal user in host, look at sysutils/jailme from ports: https://www.freshports.org/sysutils/jailme/ This version is installed setuid and does some sanity checking to ensure the username and UID match between the jail and the host system. WWW: https://github.com/Intermedix/jailme Miroslav Lachman PS: I never used jailme personally