Date: Sat, 12 Nov 2005 05:57:33 -0800 (PST) From: d c <casteld73@yahoo.com> To: albi <albi@scii.nl>, freebsd-hackers@freebsd.org Subject: Re: SSH From within a Jail Message-ID: <20051112135733.4889.qmail@web60320.mail.yahoo.com> In-Reply-To: <20051112145256.32764aa4.albi@scii.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
--- albi <albi@scii.nl> wrote: > On Sat, 12 Nov 2005 05:43:51 -0800 (PST) > d c <casteld73@yahoo.com> wrote: > > > here is the rsult from using -v. THis should > help. > > > > ns1# ssh -v 10.0.0.60 > > OpenSSH_4.2p1 FreeBSD-20050903, OpenSSL 0.9.7e-p1 > 25 > > Oct 2004 > > debug1: Reading configuration data > /etc/ssh/ssh_config > > debug1: Connecting to 10.0.0.60 [10.0.0.60] port > 22. > -- cut -- > > debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY > > debug1: read_passphrase: can't open /dev/tty: > Device > > busy > > Host key verification failed. > > > > I just don't understand how to fix "can't open > > /dev/tty" > > how do you start the jail(s) and how do you deal > with /dev in the jail > (s) ? > > here's my relevant part in /etc/rc.conf of my > host-system on a 5.4-REL > machine as a working example : > > jail_enable="YES" > jail_socket_unixiproute_only="YES" > jail_sysvipc_allow="NO" > jail_list="ssh build mail http https" > jail_set_hostname_allow="NO" > > # > jail_build_rootdir="/usr/jails/build" > jail_build_hostname="build.mydomain.org" > jail_build_ip="192.168.100.100" > jail_build_exec="/bin/sh /etc/rc" > jail_build_devfs_enable="YES" > jail_build_devfs_ruleset="devfsrules_jail" > > > -- > grtjs, albi > gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc | > gpg --import > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to > "freebsd-hackers-unsubscribe@freebsd.org" > I mounted my devs like this: mount_devfs devfs $JAILDIR/dev I did not set: jail_socket_unixiproute_only="YES" I also did not use any rules. What would a typical ruleset be? __________________________________ Yahoo! FareChase: Search multiple travel sites in one click. http://farechase.yahoo.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051112135733.4889.qmail>