From owner-freebsd-hackers@FreeBSD.ORG  Sat Nov 12 13:57:34 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
X-Original-To: freebsd-hackers@freebsd.org
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 36FD616A41F
	for <freebsd-hackers@freebsd.org>; Sat, 12 Nov 2005 13:57:34 +0000 (GMT)
	(envelope-from casteld73@yahoo.com)
Received: from web60320.mail.yahoo.com (web60320.mail.yahoo.com
	[209.73.178.128])
	by mx1.FreeBSD.org (Postfix) with SMTP id BCAF443D45
	for <freebsd-hackers@freebsd.org>; Sat, 12 Nov 2005 13:57:33 +0000 (GMT)
	(envelope-from casteld73@yahoo.com)
Received: (qmail 4892 invoked by uid 60001); 12 Nov 2005 13:57:33 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
	h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
	b=1dVw0N+gb6Ty8lHj/3k06Qa1YR+R9vSenwohBLbzLxkuMSkTCEUXtGpoXMnxdzcjzThPeA+BznbpS3NdQa+g6fXcb+JwjynlSDbib97CqrTbQFoN1wr4TRQtwRN3+TkS1RIPrzUmkzvovRFAQmA+MkgZnMbYEPnmyJ47odwLkRo=
	; 
Message-ID: <20051112135733.4889.qmail@web60320.mail.yahoo.com>
Received: from [67.139.63.215] by web60320.mail.yahoo.com via HTTP;
	Sat, 12 Nov 2005 05:57:33 PST
Date: Sat, 12 Nov 2005 05:57:33 -0800 (PST)
From: d c <casteld73@yahoo.com>
To: albi <albi@scii.nl>, freebsd-hackers@freebsd.org
In-Reply-To: <20051112145256.32764aa4.albi@scii.nl>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Cc: 
Subject: Re: SSH From within a Jail
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Nov 2005 13:57:34 -0000



--- albi <albi@scii.nl> wrote:

> On Sat, 12 Nov 2005 05:43:51 -0800 (PST)
> d c <casteld73@yahoo.com> wrote:
> 
> > here is the rsult from using -v.  THis should
> help.
> > 
> > ns1# ssh -v 10.0.0.60
> > OpenSSH_4.2p1 FreeBSD-20050903, OpenSSL 0.9.7e-p1
> 25
> > Oct 2004
> > debug1: Reading configuration data
> /etc/ssh/ssh_config
> > debug1: Connecting to 10.0.0.60 [10.0.0.60] port
> 22.
> -- cut --
> > debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
> > debug1: read_passphrase: can't open /dev/tty:
> Device
> > busy
> > Host key verification failed.
> > 
> > I just don't understand how to fix "can't open
> > /dev/tty"
> 
> how do you start the jail(s) and how do you deal
> with /dev in the jail
> (s) ?
> 
> here's my relevant part in /etc/rc.conf of my
> host-system on a 5.4-REL
> machine as a working example :
> 
> jail_enable="YES"
> jail_socket_unixiproute_only="YES"
> jail_sysvipc_allow="NO"
> jail_list="ssh build mail http https"
> jail_set_hostname_allow="NO"
> 
> #
> jail_build_rootdir="/usr/jails/build"
> jail_build_hostname="build.mydomain.org"
> jail_build_ip="192.168.100.100"
> jail_build_exec="/bin/sh /etc/rc"
> jail_build_devfs_enable="YES"
> jail_build_devfs_ruleset="devfsrules_jail"
> 
> 
> -- 
> grtjs, albi
> gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc |
> gpg --import
> _______________________________________________
> freebsd-hackers@freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to
> "freebsd-hackers-unsubscribe@freebsd.org"
> 

I mounted my devs like this:

mount_devfs devfs $JAILDIR/dev

I did not set:

jail_socket_unixiproute_only="YES"

I also did not use any rules.  What would a typical
ruleset be?




		
__________________________________ 
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com