Re: [Jailkit-users] How to jail Opera or Firefox...?

[Hubert Havel]

I finally got Opera to work in jail. Thanks, Oliver, for your assistance. 
However, I was trying to connect it to WIFI internet using Kinternet. (in 
SuSE 10.1) There when I tried to invoke
Kinternet inside the jail. By invoking the following command:

   ssh -X address@hidden  /opt/kde3/bin/kinternet

I got the following message:

   “There is an error setting inter-process communication for KDE. 
The message return by the
   system was:  Could not read network connect list.    
/home/janeDCOPserver_hostname_localhost_10     Please check that DCOPserver 
is running.”

   As it turned out, the .DCOPserver_hostname_localhost_10  file does not
   exist in the (jailed jane home directory: (/home/jane). Do I need to put
   the DCOPserver in jail too? Or is there a more elegant solution to this 
problem? Has anyone
   jailed any WiFi software - similar to Kinternet in SuSE Linux?

  Has anyone ever tried to connect to the WiFi internet using a jailed 
Kinternet or some other program?

 thanks!! Hubert.

> From: Olivier Sessink <address@hidden>
> Reply-To: address@hidden
> To: address@hidden
> Subject: Re: [Jailkit-users] How to jail Opera or Firefox...?
> Date: Mon, 07 Aug 2006 22:46:52 +0200
>
> Hubert Havel wrote:
> >
> > Hi Olivier,
> >
> >   Thank you for your directions.
> >   Just to be sure that I am taking the correct approach to jail firefox;
> >   this is a rough outline on how I envision this can be safely
> >   implemented using Jailkit:
> [..]
>
> not sure if that would work
>
> what I do is
>
> ssh -X address@hidden /usr/bin/firefox
>
> the ssh daemon will help to set up X forwarding. user jane should be
> configured to have jk_chrootsh as shell. Inside the jail, user jane
> should have jk_lsh as shell. inside the jail jk_lsh should be configured
> to allow firefox execution.
>
> so I use a different user for firefox.
>
> >   (Question 3: In additional to xauth, firefox and ssh modules, is
> >   there a networking module (e.g. kinternet) that I would need
> >   to jail so that Firefox would be able to access the internet from
> >   the jail?)
>
> you need basic networking, see jk_init or jk_init.ini for the files that
> are needed for basic networking.
>
> regards,
>         Olivier
>
>
> _______________________________________________
> Jailkit-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/jailkit-users

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/