jexec as user?

[Ronald Klop]

Yeah, ssh is also possible. See my original mail :-) https://lists.freebsd.org/pipermail/freebsd-stable/2019-November/091742.html

I run my jails with "ip4 = inherit;". So I would need to do some port-forwarding trickery with ssh on different ports.
The users already login on the host to do various actions. Jailme gives the easiest access without to much maintenance for now.

Regards,
Ronald.
 
Van: Eugene Grosbein <eugen at grosbein.net>
Datum: woensdag, 20 november 2019 11:44
Aan: Ronald Klop <ronald-lists at klop.ws>, Miroslav Lachman <000.fbsd at quip.cz>
CC: Christos Chatzaras <chris at cretaforce.gr>, freebsd-stable <freebsd-stable at freebsd.org>
Onderwerp: Re: jexec as user?
> 
> 20.11.2019 16:47, Ronald Klop wrote:
> 
> > Thanks for all the advice. I am indeed looking for using jail from the non-root user in the host. Jailme sounds like a good solution.
> >
> > My use case is providing a relatively save way of giving a user the possibility to experiment with root rights (like creating and installing ports) without wracking the host system.
> > The users are trusted so it is not so much about security. More about keeping the host system clean.
> 
> You also could run ssh service inside the jail and give users opportunity to experiment with ssh and keys :-)
>  
> 
> 
>