Sat 11 Sep 2010 01:46:31 PM UTC, comment #14:
thanks, fixed that too
I'll do a new release soon
|
Sat 11 Sep 2010 01:21:01 PM UTC, comment #13:
regarding the installation of the .ini files, I just found this in the Makefile.in file:
install:
${INSTALL} -d -m 755 ${DESTDIR}${iniprefix}
for file in ${INIFILES} ; do \
if [ -f ${iniprefix}$${file} ]; then \
${INSTALL} -m 0644 ini/$${file} ${DESTDIR}${iniprefix}$${file}.dist ;\
else \
${INSTALL} -m 0644 ini/$${file} ${DESTDIR}${iniprefix} ;\
fi ;\
done
Where I guess the if check should probably test for: ${DESTDIR}${iniprefix}$${file} instead of ${iniprefix}$${file}
|
Sat 11 Sep 2010 06:24:31 AM UTC, comment #12:
Thanks for adding those bits too.
As I said, from my point of view, you may leave the .ini files as is. The more annoying parts of this report are fixed for me ;)
Btw: I don't know how often you create new releases, and whether those stuff I reported and that got fixed is worth a new release, but if you plan on releasing sth. in the next few days/weeks, then I'd wait to send my port of jailkit for OpenBSD to others to get it into the ports tree. With a new release, I'd get rid of a lot of patches, and the port would look much cleaner ;)
If not, I'd send what I have this weekend to others for review, and have to update it later when you made a new jailkit release.
|
Fri 10 Sep 2010 02:53:56 PM UTC, comment #11:
sorry, missed that one, applied to cvs now.
still in doubt about the .ini files
|
Wed 08 Sep 2010 07:44:23 AM UTC, comment #10:
jk_jailuser has the PREFIX configured, but the Makefile in py subdirectory doesn't update the PREFIX, it only updates the INIPREFIX, LIBDIR, and the PYTHONINTERPRETER, but misses the PREFIX:
.in:
sed -e "s!INIPREFIX='/etc/jailkit'!INIPREFIX='${INIPREFIX}'!" \
-e "s!LIBDIR='[a-z/]*'!LIBDIR='${PYLIBDIR}'!" \
-e "s:#!/usr/bin/python:#!$(PYTHONINTERPRETER):" < $< > $@
see my patch to the Makefile.in in the latest tarball.
For jk_check see the patch to jk_check.in in the latest tarball.
With the jk_init.ini file, as I said, I'm fine, I can update all the paths to match all the stuff in OpenBSD.
|
Tue 07 Sep 2010 09:54:08 PM UTC, comment #9:
for different versions of the binary the whole problem doesn't exist: the default ini files are not installed anyway if a copy of jailkit exists already somewhere on the disk.
for jk_jailuser: it uses prefix correctly, doesn't it?
jk_check indeed has a hardcoded path left, I overlooked that one.
|
Tue 07 Sep 2010 12:53:42 PM UTC, comment #8:
I took a look at the changes. I'm not sure whether making use of the PATH environment variable is the right way to go. It may make things simpler, but may also be a cause of errors. Think of different versions of the binary that you want to get into the chroot jail in the PATH? As far as I can see, it will pick up the first? (I have to admit I haven't tried yet)
For me as a porter, its actually not a problem to update the fully qualified paths in the example jk_init.ini file to make the paths fit for OpenBSD. I'll prefer to use the full path to the binary, just to be sure it picks up the right one every time. I only thought that at least the files that get installed with jailkit should get the right path in the configuration file, since ./configure knows where they end up in the system. I added the ini/Makefile.in and the .ini.in files for all files in the directory, but IIRC the only file that actually gets changed in the end is the jk_init.ini.
And what about the still hardcoded paths in py/jk_check.in and py/jk_jailuser.py?
From the last tarball I updated, there in the jailkit-patch2, the patches to py/Makefile.in, and py/jk_check.in?
|
Sun 05 Sep 2010 08:28:38 PM UTC, comment #7:
I've created a different solution: jk_cp and jk_init can now resolve files using the PATH. So in jk_init.ini you can now just specify 'jk_lsh' without any prefix and, jk_init will resolve it automatically. This will fix the default config file for many more binaries that might have a different location on different platforms.
Do you think that fixes this bug?
|
Sun 15 Aug 2010 01:46:02 PM UTC, comment #6:
attached a new tarball. It contains a combined patch, and new contents for the ini directory. Replace the actual ini directory wit the contents of the tarball.
(file #21225)
|
Fri 13 Aug 2010 02:26:22 PM UTC, comment #5:
can you create one diff for your complete jailkit directory in one patch so I can apply the complete patch in one command?
create the patch using
diff -u /path/to/oldjailkit /path/to/newjailkit
|
Thu 12 Aug 2010 06:58:59 AM UTC, comment #4:
Updated tarball now with configure.ac. Also fixed a small bug in the jk_init.ini.in file I introduced, and added /bin/ksh to the basicshell section to jk_init.ini.
(file #21202)
|
Wed 11 Aug 2010 11:36:25 AM UTC, comment #3:
The attached tarball allows to makes the ini/ini files more flexible. The ini/ini files need to be removed, and then replaced with the ini/*ini.in files from the tarball. The configure script is updated to take the ini/Makefile.in from the tarball into account.
(file #21192)
|
Wed 11 Aug 2010 10:11:57 AM UTC, comment #2:
Attached patches try to fix the --prefix problem at least in the pythong scripts. It is used to fix the PREFIX in py/jk_check.in and py/jk_jailuser.py
The jk_jailuser.py already had a PREFIX defined, but statically which was not changed to match --prefix.
Added the update of PREFIX to the Makefile.in and added a PREFIX statement to the jk_check.in file.
(file #21188, file #21189)
|
Thu 01 May 2008 04:08:38 PM UTC, comment #1:
true. the example jk_init.ini file has the default jailkit prefix. However, it has default values for many more executables, and all of those could be wrong. It is only an example file.
if we're going to fix it we should try to fix it for all the exaple entries.
|
Tue 29 Apr 2008 12:52:00 PM UTC, original submission:
If you choose to install jailkit in a custom prefix there is some wrong issues especially for jk_lsh executable. jk_init don't know the right location so it can't copy it to the jail.
I tried to install in the /opt/jailkit prefix and it was searching for /usr/sbin/jk_lsh instead of /opt/jailkit/sbin/jk_lsh.
|