running nessus from inside of a jail

Reinhold freebsd at violetlan.net
Fri Jun 20 13:10:52 UTC 2008


Hi

I've created a jail where only nessus lives in, the jail is working very
nicely but nessus keeps on crashing.

Here is what I see from the nessus.core file
(gdb) core nessusd.core
Core was generated by `nessusd'.
Program terminated with signal 4, Illegal instruction.
#0  0x280da85b in ?? ()

this is how I'm using nessus to scan the hosts
nessus -q -x -V -c /root/work/nessusrc -T html localhost 1241 root
password /root/work/work_temp/nessus_targets
/usr/local/www/apache22/data/results/nessus/2008-06-20/target_subnet.html

When I run nessus from the host system it works but from inside the jail
it cure dumps all the time.

here is my jail sysctl info
sysctl -a |grep jail
security.jail.jailed: 1
security.jail.mount_allowed: 0
security.jail.chflags_allowed: 0
security.jail.allow_raw_sockets: 1
security.jail.enforce_statfs: 2
security.jail.sysvipc_allowed: 0
security.jail.socket_unixiproute_only: 1
security.jail.set_hostname_allowed: 1

I had to change security.jail.allow_raw_sockets to one to get nmap to work.

Any help will be appreciated.

Thanks
Reinhold



More information about the freebsd-questions mailing list