[help me] Security and Jailkit

Discussion in 'Installation/Configuration' started by MikySal78, Jan 11, 2020.

  1. MikySal78

    MikySal78 Member

    in my CP i don't have shell users bat see in dir
    Code:
    root@cp:~ # cd /var/www/offerta.in
    root@cp:offerta.in # ll
    totale 60K
    drwxr-xr-x 15 root root    4,0K dic  8 12:00 .
    drwxr-xr-x 10 root root    4,0K dic 19 22:09 ..
    lrwxrwxrwx  1 root root       7 dic  8 12:00 bin -> usr/bin
    drwxr-xr-x  2 web1 client1 4,0K dic  8 00:35 cgi-bin
    drwxr-xr-x  2 root root    4,0K gen 11 20:13 dev
    drwxr-xr-x  6 root root    4,0K dic 10 22:00 etc
    drwxr-xr-x  3 web1 root    4,0K dic  8 12:00 home
    lrwxrwxrwx  1 root root       7 dic  8 12:00 lib -> usr/lib
    lrwxrwxrwx  1 root root       9 dic  8 12:00 lib64 -> usr/lib64
    drwxr-xr-x  2 root root    4,0K gen 11 00:04 log
    drwx--x---  2 web1 client1 4,0K dic 10 22:17 private
    drwx------  2 web1 client1 4,0K dic  8 00:35 .ssh
    drwxr-xr-x  2 root root    4,0K gen 10 18:28 ssl
    drwxrwxrwx  2 web1 client1 4,0K dic 30 19:31 tmp
    drwxr-xr-x  7 root root    4,0K dic  8 12:00 usr
    drwxr-xr-x  3 root root    4,0K dic  8 12:00 var
    drwx--x--x 14 web1 client1 4,0K dic  8 15:43 web
    drwx--x---  2 web1 client1 4,0K dic  8 00:35 webdav
    and this:

    Code:
    root@cp:offerta.in # jk_list
    Pid    User     Jail               Command                                     
    14181  nobody   /etc/jailkit       /usr/sbin/jk_socketd                         
    1162   dovecot  /run/dovecot/empty /usr/lib/dovecot/stats                       
    638    dovecot  /run/dovecot/empty /usr/lib/dovecot/anvil                       
    22421  dovenull /run/dovecot/login /usr/lib/dovecot/imap-login                 
    22751  dovenull /run/dovecot/login /usr/lib/dovecot/imap-login                 
    2398   dovenull /run/dovecot/login /usr/lib/dovecot/imap-login                 
    2436   dovenull /run/dovecot/login /usr/lib/dovecot/imap-login                 
    10634  postfix  /var/spool/postfix /usr/lib/postfix/sbin/smtpd -n smtp -t inet -
    1144   postfix  /var/spool/postfix /usr/lib/postfix/sbin/tlsmgr -l -t unix -u -c
    1157   postfix  /var/spool/postfix /usr/lib/postfix/sbin/anvil -l -t unix -u -c
    12531  postfix  /var/spool/postfix /usr/lib/postfix/sbin/smtpd -n smtp -t inet -
    13502  postfix  /var/spool/postfix /usr/lib/postfix/sbin/smtpd -n smtp -t inet -
    14212  postfix  /var/spool/postfix /usr/lib/postfix/sbin/smtpd -n smtp -t inet -
    14272  postfix  /var/spool/postfix /usr/lib/postfix/sbin/smtpd -n smtp -t inet -
    14612  postfix  /var/spool/postfix /usr/lib/postfix/sbin/smtpd -n smtp -t inet -
    8624   postfix  /var/spool/postfix /usr/lib/postfix/sbin/pickup -l -t unix -u -c
    
    Code:
    root@cp:offerta.in # cat etc/passwd
    root:x:0:0:root:/root:/bin/bash
    web1:x:5004:5005::/home/web1:/bin/bash
    
    I don't create user for Jailkit and is normal root access?
    How-to remove this users from Jailkit and remove folder lib home .ssh etc..
    Thanks.
    Michele
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Jailkit is not only used for jailed shell users, but it is also used for cronjobs as well. Don't remove these folders and the local jail passwd file is fine, it odes not grant root access.
     
    MikySal78 likes this.
  3. MikySal78

    MikySal78 Member

    For you is all ok?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes, that looks like a normal jail as it's used for shell users and for cronjobs.
     

Share This Page