This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
технология_jail [2015/05/13 11:50] val [FreeBSD10.X] |
технология_jail [2016/04/22 14:02] val [FreeBSD8.X] |
||
---|---|---|---|
Line 11: | Line 11: | ||
# mount_cd9660 /dev/cd0 /mnt | # mount_cd9660 /dev/cd0 /mnt | ||
- | # setenv D /var/jail/www2 | + | # setenv D /var/jail/www |
# mkdir -p $D | # mkdir -p $D | ||
Line 69: | Line 69: | ||
exec.start = "/bin/sh /etc/rc"; | exec.start = "/bin/sh /etc/rc"; | ||
exec.stop = "/bin/sh /etc/rc.shutdown"; | exec.stop = "/bin/sh /etc/rc.shutdown"; | ||
- | exec.consolelog = "/var/log/jail.log"; | ||
mount.devfs; | mount.devfs; | ||
allow.set_hostname = 0; | allow.set_hostname = 0; | ||
Line 79: | Line 78: | ||
interface = "em0"; | interface = "em0"; | ||
ip4.addr = "192.168.X.20"; | ip4.addr = "192.168.X.20"; | ||
+ | exec.consolelog = "/var/log/jail_www_console.log"; | ||
} | } | ||
</code><code> | </code><code> | ||
Line 84: | Line 84: | ||
</code> | </code> | ||
- | ==== FreeBSD8.X ==== | ||
- | <code> | ||
- | [server:~] # cat /etc/rc.conf | ||
- | </code><code> | ||
- | ... | ||
- | jail_enable="YES" | ||
- | jail_list="www" | ||
- | jail_www_rootdir="/var/jail/www" | ||
- | jail_www_hostname="www.corpX.un" | ||
- | jail_www_interface="em0" | ||
- | jail_www_ip="192.168.X.20" | ||
- | jail_www_devfs_enable="YES" | ||
- | jail_www_devfs_ruleset="devfsrules_jail" | ||
- | </code><code> | ||
- | [server:~] # sysctl security.jail.allow_raw_sockets=1 | ||
- | |||
- | [server:~] # /etc/rc.d/jail start www | ||
- | </code> | ||
===== Просмотр и подключение к jail ===== | ===== Просмотр и подключение к jail ===== | ||
Line 114: | Line 96: | ||
===== Настройка jail ===== | ===== Настройка jail ===== | ||
<code> | <code> | ||
+ | www# hostname | ||
+ | |||
www# cat /etc/rc.conf | www# cat /etc/rc.conf | ||
</code><code> | </code><code> | ||
- | hostname=www.corpX.un | ||
sshd_enable=yes | sshd_enable=yes | ||
</code><code> | </code><code> |