SSH From within a Jail

[d c]

--- albi <albi at scii.nl> wrote:

> On Sat, 12 Nov 2005 05:43:51 -0800 (PST)
> d c <casteld73 at yahoo.com> wrote:
> 
> > here is the rsult from using -v.  THis should
> help.
> > 
> > ns1# ssh -v 10.0.0.60
> > OpenSSH_4.2p1 FreeBSD-20050903, OpenSSL 0.9.7e-p1
> 25
> > Oct 2004
> > debug1: Reading configuration data
> /etc/ssh/ssh_config
> > debug1: Connecting to 10.0.0.60 [10.0.0.60] port
> 22.
> -- cut --
> > debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
> > debug1: read_passphrase: can't open /dev/tty:
> Device
> > busy
> > Host key verification failed.
> > 
> > I just don't understand how to fix "can't open
> > /dev/tty"
> 
> how do you start the jail(s) and how do you deal
> with /dev in the jail
> (s) ?
> 
> here's my relevant part in /etc/rc.conf of my
> host-system on a 5.4-REL
> machine as a working example :
> 
> jail_enable="YES"
> jail_socket_unixiproute_only="YES"
> jail_sysvipc_allow="NO"
> jail_list="ssh build mail http https"
> jail_set_hostname_allow="NO"
> 
> #
> jail_build_rootdir="/usr/jails/build"
> jail_build_hostname="build.mydomain.org"
> jail_build_ip="192.168.100.100"
> jail_build_exec="/bin/sh /etc/rc"
> jail_build_devfs_enable="YES"
> jail_build_devfs_ruleset="devfsrules_jail"
> 
> 
> -- 
> grtjs, albi
> gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc |
> gpg --import
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to
> "freebsd-hackers-unsubscribe at freebsd.org"
> 

I mounted my devs like this:

mount_devfs devfs $JAILDIR/dev

I did not set:

jail_socket_unixiproute_only="YES"

I also did not use any rules.  What would a typical
ruleset be?




		
__________________________________ 
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com