[root@server ~]# jk_init -v /var/jail basicshell WARNING: section /var/jail does not exist in /etc/jailkit/jk_init.ini Source file(s) /lib/libnsl.so.1 do not exist Creating symlink /var/jail/lib64 to usr/lib64 Create directory /var/jail/usr Create directory /var/jail/usr/lib64 Creating symlink /var/jail/usr/lib64/libnsl.so.1 to libnsl.so.2.0.0 Copying /lib64/libnsl.so.2.0.0 to /var/jail/usr/lib64/libnsl.so.2.0.0 Creating symlink /var/jail/usr/lib64/libtirpc.so.3 to libtirpc.so.3.0.0 Copying /lib64/libtirpc.so.3.0.0 to /var/jail/usr/lib64/libtirpc.so.3.0.0 Creating symlink /var/jail/usr/lib64/libc.so.6 to libc-2.28.so Copying /lib64/libc-2.28.so to /var/jail/usr/lib64/libc-2.28.so Creating symlink /var/jail/usr/lib64/ld-linux-x86-64.so.2 to ld-2.28.so Copying /lib64/ld-2.28.so to /var/jail/usr/lib64/ld-2.28.so Creating symlink /var/jail/usr/lib64/libgssapi_krb5.so.2 to libgssapi_krb5.so.2.2 Copying /lib64/libgssapi_krb5.so.2.2 to /var/jail/usr/lib64/libgssapi_krb5.so.2.2 Creating symlink /var/jail/usr/lib64/libkrb5.so.3 to libkrb5.so.3.3 Copying /lib64/libkrb5.so.3.3 to /var/jail/usr/lib64/libkrb5.so.3.3 Creating symlink /var/jail/usr/lib64/libk5crypto.so.3 to libk5crypto.so.3.1 Copying /lib64/libk5crypto.so.3.1 to /var/jail/usr/lib64/libk5crypto.so.3.1 Creating symlink /var/jail/usr/lib64/libcom_err.so.2 to libcom_err.so.2.1 Copying /lib64/libcom_err.so.2.1 to /var/jail/usr/lib64/libcom_err.so.2.1 Creating symlink /var/jail/usr/lib64/libpthread.so.0 to libpthread-2.28.so Copying /lib64/libpthread-2.28.so to /var/jail/usr/lib64/libpthread-2.28.so Creating symlink /var/jail/usr/lib64/libkrb5support.so.0 to libkrb5support.so.0.1 Copying /lib64/libkrb5support.so.0.1 to /var/jail/usr/lib64/libkrb5support.so.0.1 Creating symlink /var/jail/usr/lib64/libdl.so.2 to libdl-2.28.so Copying /lib64/libdl-2.28.so to /var/jail/usr/lib64/libdl-2.28.so Creating symlink /var/jail/usr/lib64/libkeyutils.so.1 to libkeyutils.so.1.6 Copying /lib64/libkeyutils.so.1.6 to /var/jail/usr/lib64/libkeyutils.so.1.6 Creating symlink /var/jail/usr/lib64/libcrypto.so.1.1 to libcrypto.so.1.1.1g Copying /lib64/libcrypto.so.1.1.1g to /var/jail/usr/lib64/libcrypto.so.1.1.1g Creating symlink /var/jail/usr/lib64/libresolv.so.2 to libresolv-2.28.so Copying /lib64/libresolv-2.28.so to /var/jail/usr/lib64/libresolv-2.28.so Copying /lib64/libselinux.so.1 to /var/jail/usr/lib64/libselinux.so.1 Creating symlink /var/jail/usr/lib64/libz.so.1 to libz.so.1.2.11 Copying /lib64/libz.so.1.2.11 to /var/jail/usr/lib64/libz.so.1.2.11 Creating symlink /var/jail/usr/lib64/libpcre2-8.so.0 to libpcre2-8.so.0.7.1 Copying /lib64/libpcre2-8.so.0.7.1 to /var/jail/usr/lib64/libpcre2-8.so.0.7.1 Source file(s) /lib/libnss*.so.2 do not exist Creating symlink /var/jail/usr/lib64/libnss_compat.so.2 to libnss_compat-2.28.so Copying /lib64/libnss_compat-2.28.so to /var/jail/usr/lib64/libnss_compat-2.28.so Creating symlink /var/jail/usr/lib64/libnss_dns.so.2 to libnss_dns-2.28.so Copying /lib64/libnss_dns-2.28.so to /var/jail/usr/lib64/libnss_dns-2.28.so Creating symlink /var/jail/usr/lib64/libnss_files.so.2 to libnss_files-2.28.so Copying /lib64/libnss_files-2.28.so to /var/jail/usr/lib64/libnss_files-2.28.so Copying /lib64/libnss_myhostname.so.2 to /var/jail/usr/lib64/libnss_myhostname.so.2 Creating symlink /var/jail/usr/lib64/librt.so.1 to librt-2.28.so Copying /lib64/librt-2.28.so to /var/jail/usr/lib64/librt-2.28.so Creating symlink /var/jail/usr/lib64/libmount.so.1 to libmount.so.1.1.0 Copying /lib64/libmount.so.1.1.0 to /var/jail/usr/lib64/libmount.so.1.1.0 Creating symlink /var/jail/usr/lib64/libgcc_s.so.1 to libgcc_s-8-20191121.so.1 Copying /lib64/libgcc_s-8-20191121.so.1 to /var/jail/usr/lib64/libgcc_s-8-20191121.so.1 Creating symlink /var/jail/usr/lib64/libblkid.so.1 to libblkid.so.1.1.0 Copying /lib64/libblkid.so.1.1.0 to /var/jail/usr/lib64/libblkid.so.1.1.0 Creating symlink /var/jail/usr/lib64/libuuid.so.1 to libuuid.so.1.3.0 Copying /lib64/libuuid.so.1.3.0 to /var/jail/usr/lib64/libuuid.so.1.3.0 Copying /lib64/libnss_resolve.so.2 to /var/jail/usr/lib64/libnss_resolve.so.2 Creating symlink /var/jail/usr/lib64/libcap.so.2 to libcap.so.2.26 Copying /lib64/libcap.so.2.26 to /var/jail/usr/lib64/libcap.so.2.26 Copying /lib64/libnss_systemd.so.2 to /var/jail/usr/lib64/libnss_systemd.so.2 Copying /lib64/libnss_sss.so.2 to /var/jail/usr/lib64/libnss_sss.so.2 Source file(s) /lib/i386-linux-gnu/libnsl.so.1 do not exist Source file(s) /lib/i386-linux-gnu/libnss*.so.2 do not exist Source file(s) /lib/x86_64-linux-gnu/libnsl.so.1 do not exist Source file(s) /lib/x86_64-linux-gnu/libnss*.so.2 do not exist Source file(s) /lib/arm-linux-gnueabihf/libnss*.so.2 do not exist Source file(s) /lib/arm-linux-gnueabihf/libnsl*.so.1 do not exist Create directory /var/jail/etc Copying /etc/nsswitch.conf to /var/jail/etc/nsswitch.conf Copying /etc/ld.so.conf to /var/jail/etc/ld.so.conf ldd returns non existing library ist for /etc/ld.so.conf Creating symlink /var/jail/bin to usr/bin Create directory /var/jail/usr/bin Creating symlink /var/jail/usr/bin/sh to bash Copying /bin/bash to /var/jail/usr/bin/bash Creating symlink /var/jail/usr/lib64/libtinfo.so.6 to libtinfo.so.6.1 Copying /lib64/libtinfo.so.6.1 to /var/jail/usr/lib64/libtinfo.so.6.1 /var/jail/usr/bin/bash already exists, will not touch it Copying /usr/bin/ls to /var/jail/usr/bin/ls Copying /usr/bin/cat to /var/jail/usr/bin/cat Copying /usr/bin/chmod to /var/jail/usr/bin/chmod Copying /usr/bin/mkdir to /var/jail/usr/bin/mkdir Copying /usr/bin/cp to /var/jail/usr/bin/cp Creating symlink /var/jail/usr/lib64/libacl.so.1 to libacl.so.1.1.2253 Copying /lib64/libacl.so.1.1.2253 to /var/jail/usr/lib64/libacl.so.1.1.2253 Creating symlink /var/jail/usr/lib64/libattr.so.1 to libattr.so.1.1.2448 Copying /lib64/libattr.so.1.1.2448 to /var/jail/usr/lib64/libattr.so.1.1.2448 Copying /usr/bin/cpio to /var/jail/usr/bin/cpio Copying /usr/bin/date to /var/jail/usr/bin/date Copying /usr/bin/dd to /var/jail/usr/bin/dd Copying /usr/bin/echo to /var/jail/usr/bin/echo Copying /usr/bin/egrep to /var/jail/usr/bin/egrep ldd returns non existing library ist for /usr/bin/egrep Copying /usr/bin/false to /var/jail/usr/bin/false Copying /usr/bin/fgrep to /var/jail/usr/bin/fgrep ldd returns non existing library ist for /usr/bin/fgrep Copying /usr/bin/grep to /var/jail/usr/bin/grep Creating symlink /var/jail/usr/lib64/libpcre.so.1 to libpcre.so.1.2.10 Copying /lib64/libpcre.so.1.2.10 to /var/jail/usr/lib64/libpcre.so.1.2.10 Copying /usr/bin/gunzip to /var/jail/usr/bin/gunzip ldd returns non existing library ist for /usr/bin/gunzip Copying /usr/bin/gzip to /var/jail/usr/bin/gzip Copying /usr/bin/ln to /var/jail/usr/bin/ln Copying /usr/bin/mktemp to /var/jail/usr/bin/mktemp Copying /usr/bin/more to /var/jail/usr/bin/more Copying /usr/bin/mv to /var/jail/usr/bin/mv Copying /usr/bin/pwd to /var/jail/usr/bin/pwd Copying /usr/bin/rm to /var/jail/usr/bin/rm Copying /usr/bin/rmdir to /var/jail/usr/bin/rmdir Copying /usr/bin/sed to /var/jail/usr/bin/sed /var/jail/usr/bin/sh already exists, will not touch it Copying /usr/bin/sleep to /var/jail/usr/bin/sleep Copying /usr/bin/sync to /var/jail/usr/bin/sync Copying /usr/bin/tar to /var/jail/usr/bin/tar Copying /usr/bin/touch to /var/jail/usr/bin/touch Copying /usr/bin/true to /var/jail/usr/bin/true Copying /usr/bin/zcat to /var/jail/usr/bin/zcat ldd returns non existing library ist for /usr/bin/zcat Copying /etc/motd to /var/jail/etc/motd Copying /etc/issue to /var/jail/etc/issue Source file(s) /etc/bash.bashrc do not exist Copying /etc/bashrc to /var/jail/etc/bashrc Copying /etc/profile to /var/jail/etc/profile Create directory /var/jail/usr/lib Create directory /var/jail/usr/lib/locale Create directory /var/jail/usr/lib/locale/en_US.utf8 Create directory /var/jail/usr/lib/locale/en_US.utf8/LC_MESSAGES Copying /usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES to /var/jail/usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES Copying /usr/lib/locale/en_US.utf8/LC_ADDRESS to /var/jail/usr/lib/locale/en_US.utf8/LC_ADDRESS ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_ADDRESS Copying /usr/lib/locale/en_US.utf8/LC_IDENTIFICATION to /var/jail/usr/lib/locale/en_US.utf8/LC_IDENTIFICATION ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_IDENTIFICATION Copying /usr/lib/locale/en_US.utf8/LC_MEASUREMENT to /var/jail/usr/lib/locale/en_US.utf8/LC_MEASUREMENT ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_MEASUREMENT Copying /usr/lib/locale/en_US.utf8/LC_MONETARY to /var/jail/usr/lib/locale/en_US.utf8/LC_MONETARY ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_MONETARY Copying /usr/lib/locale/en_US.utf8/LC_TELEPHONE to /var/jail/usr/lib/locale/en_US.utf8/LC_TELEPHONE ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_TELEPHONE Copying /usr/lib/locale/en_US.utf8/LC_TIME to /var/jail/usr/lib/locale/en_US.utf8/LC_TIME ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_TIME Copying /usr/lib/locale/en_US.utf8/LC_COLLATE to /var/jail/usr/lib/locale/en_US.utf8/LC_COLLATE ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_COLLATE Copying /usr/lib/locale/en_US.utf8/LC_CTYPE to /var/jail/usr/lib/locale/en_US.utf8/LC_CTYPE ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_CTYPE Copying /usr/lib/locale/en_US.utf8/LC_NAME to /var/jail/usr/lib/locale/en_US.utf8/LC_NAME ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_NAME Copying /usr/lib/locale/en_US.utf8/LC_NUMERIC to /var/jail/usr/lib/locale/en_US.utf8/LC_NUMERIC ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_NUMERIC Copying /usr/lib/locale/en_US.utf8/LC_PAPER to /var/jail/usr/lib/locale/en_US.utf8/LC_PAPER ldd returns non existing library ist for /usr/lib/locale/en_US.utf8/LC_PAPER Copying /usr/bin/uname to /var/jail/usr/bin/uname Copying /usr/bin/expr to /var/jail/usr/bin/expr Creating symlink /var/jail/usr/lib64/libgmp.so.10 to libgmp.so.10.3.2 Copying /lib64/libgmp.so.10.3.2 to /var/jail/usr/lib64/libgmp.so.10.3.2 Copying /usr/bin/xargs to /var/jail/usr/bin/xargs writing user root to /var/jail/etc/passwd writing group root to /var/jail/etc/group [root@server ~]# jk_init -v /var/jail jk_lsh usr/bin/var/jail/bin WARNING: section /var/jail does not exist in /etc/jailkit/jk_init.ini Source file(s) /lib/libnsl.so.1 do not exist /var/jail/usr/lib64/libnsl.so.1 already exists, will not touch it Source file(s) /lib/libnss*.so.2 do not exist /var/jail/usr/lib64/libnss_compat.so.2 already exists, will not touch it /var/jail/usr/lib64/libnss_dns.so.2 already exists, will not touch it /var/jail/usr/lib64/libnss_files.so.2 already exists, will not touch it /var/jail/usr/lib64/libnss_myhostname.so.2 already exists, will not touch it /var/jail/usr/lib64/libnss_resolve.so.2 already exists, will not touch it /var/jail/usr/lib64/libnss_systemd.so.2 already exists, will not touch it /var/jail/usr/lib64/libnss_sss.so.2 already exists, will not touch it Source file(s) /lib/i386-linux-gnu/libnsl.so.1 do not exist Source file(s) /lib/i386-linux-gnu/libnss*.so.2 do not exist Source file(s) /lib/x86_64-linux-gnu/libnsl.so.1 do not exist Source file(s) /lib/x86_64-linux-gnu/libnss*.so.2 do not exist Source file(s) /lib/arm-linux-gnueabihf/libnss*.so.2 do not exist Source file(s) /lib/arm-linux-gnueabihf/libnsl*.so.1 do not exist /var/jail/etc/nsswitch.conf already exists, will not touch it /var/jail/etc/ld.so.conf already exists, will not touch it Creating symlink /var/jail/etc/localtime to ../usr/share/zoneinfo/Europe/Zurich Create directory /var/jail/usr/share Create directory /var/jail/usr/share/zoneinfo Create directory /var/jail/usr/share/zoneinfo/Europe Copying /usr/share/zoneinfo/Europe/Zurich to /var/jail/usr/share/zoneinfo/Europe/Zurich ldd returns non existing library ist for /etc/localtime we already have /var/jail/dev/log in /etc/jailkit/jk_socketd.ini Create directory /var/jail/usr/sbin Copying /usr/sbin/jk_lsh to /var/jail/usr/sbin/jk_lsh /var/jail/usr/lib64/libpthread.so.0 already exists, will not touch it /var/jail/usr/lib64/libc.so.6 already exists, will not touch it /var/jail/usr/lib64/ld-linux-x86-64.so.2 already exists, will not touch it Create directory /var/jail/etc/jailkit Copying /etc/jailkit/jk_lsh.ini to /var/jail/etc/jailkit/jk_lsh.ini user root exists in /var/jail/etc/passwd group root exists in /var/jail/etc/group [root@server ~]# jk_jailuser -m -j /var/jail test ------passwd File in /etc/passwd (normal system)---------- test:x:1007:1007::/var/jail/./home/test:/usr/sbin/jk_chrootsh [root@server ~]# sudo -u test ls / bin dev home lib64 mnt proc run srv tmp var boot etc lib media opt root sbin sys usr [root@server ~]# ls /var/jail bin dev etc home lib64 usr