wiki:experiences:igraltist:jail_squid [RSBAC: Extending Linux Security Beyond the Limits]

Releases

Current version
Git/Latestdiff: 1.5.6

Latest Snapshots
Produced after each commit or rebase to new upstream version

GIT
RSBAC source code, can be unstable sometimes

Events

No events planned

--- squid_org	2008-07-14 05:09:33.000000000 +0200
+++ squid	2008-07-05 16:35:50.000000000 +0200
@@ -98,7 +98,7 @@
 	maxfds
 	umask 027
 	cd $cdr
-	start-stop-daemon --quiet --start \
+	run-jail squid start-stop-daemon --quiet --start \
 		--pidfile $PIDFILE \
 		--chuid $CHUID \
 		--exec $DAEMON -- $SQUID_ARGS < /dev/null

;
; RSBAC JAIL definition for squid
; 20080507
;
; Testet by
; igraltist on debian
 
""
"0.0.0.0"
(allow-ipc-syslog
 allow-dev-read
 allow-dev-write
 allow-dev-get-status
 allow-ipc-parent
 allow-external-ipc)
()
()
(rlimit)

This is execute now:
rsbac_jail  -y -d -D -e -P -i -M  rlimit start-stop-daemon  --quiet --start --pidfile /var/run/squid.pid --chuid root --exec /usr/sbin/squid -- -D -sYC

//