wiki:experiences:igraltist:jail_dhcpd [RSBAC: Extending Linux Security Beyond the Limits]

Releases

Current version
Git/Latestdiff: 1.5.6

Latest Snapshots
Produced after each commit or rebase to new upstream version

GIT
RSBAC source code, can be unstable sometimes

Events

No events planned

;
; RSBAC JAIL definition for dhcpd
;
; In the configuration file from dhcpd is set chroot
; and is changing to user and group dhcp.
;
; 20110111
;
; Installed versions:  3.1.3_p1(12:09:38 06.05.2011)(kernel_linux -doc -minimal -selinux -static)
;
; Tested by Jens Kasten(igraltist)
; on Gentoo(hardened)
;
""
""
(allow-dev-write
 allow-external-ipc
 allow-inet-raw
 allow-all-net-family)
(net-raw
 sys-chroot
 dac-override
 chown
 net-bind-service
 setgid
 setuid)
()
()

//