Running Tor service in the jail environment

Hubert Hauser atypical at autisticstory.net
Tue Dec 11 18:59:55 UTC 2018


Hello!
> You should not be running ntpd inside a jail, it won't have the
> priveleges to set the kernel clock anyway, only the ntpd running in a
> non-jailed environment can do that.

How can I prevent running ntpd and lpd in the jail environment?

> I wouldn't use a jail for that. Take a look at this article I wrote
> about how to use Tor in the manner you're looking for:
>
> https://github.com/lattera/articles/blob/master/infosec/tor/2017-01-14_torified_home/article.md

It sounds like a good idea but weren't a better solution use an
open-hardware device acting as Tor router with installed OpenBSD or
HardenedBSD? Why wouldn't you use for it jail environment? I want to
place Tor in the jail environment because I want to prevent system being
compromised in case compromising Tor service.

Thank you in advance,
Hubert.




More information about the freebsd-hackers mailing list