Re: [Jailkit-users] rsync files

[Olivier Sessink]

Bas Jansen wrote:
> No it's quite different (if you meant the first version), on the server
> sides you now have a read only mount (bind in the 1 i spread out, might
> switch to loopback to save on disk space) that only contains the setuid
> rooted rsync, the libraries and the etc user file (for just that jail
> user). Then there is a no-dev, no-suid, no-exec writeable mount mounted
> under that other mount as /data where the stuff is actually written.
> 
> This means that you can't read device files from the backup, can't
> modify any files that  are used in the jail itself since they are
> read-only.
> 
> Hope that explains a bit? ... i should draw a simple model of it some
> time to make it easily visible i guess :P

or we could describe this setup as a jailkit howto..?

"Howto jail setuid processes" or "Howto safely jail a setuid root rsync"

regards,
        Olivier