Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 13th October 2011, 00:06
walkero walkero is offline
Junior Member
 
Join Date: Sep 2007
Posts: 11
Thanks: 0
Thanked 0 Times in 0 Posts
Default jailkit ssh user and mysql access

Hello to all. Today I wanted to give to a specific ssh user access to mysql. This user was created with jailkit chroot access on the server. What I did was to copy the necessary files from root to this user's folders. To be more speciic I did the following:

1. Copied /usr/bin/mysql to /var/www/clients/client1/webX/usr/bin/
2. Copied /usr/lib/libmysqlclient.so.16 to /var/www/clients/client1/webX/usr/lib/. This file is a link, so I copied and the equivalent library file in the same folder
3. Copied /usr/lib/libstdc++.so.6 to /var/www/clients/client1/webX/usr/lib/. Same as above.
4. Copied /lib/libgcc_s.so.1 to /var/www/clients/client1/webX/lib/

By doing these steps, the user got access to the mysql, and only on his own domain database, as I wanted.

What I would like to ask is if what I did was the right way to configure that, or there is a better way to do it.

Thank you all for your time.
Reply With Quote
Sponsored Links
  #2  
Old 13th October 2011, 09:56
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,015
Thanks: 840
Thanked 5,652 Times in 4,461 Posts
Default

That procedure is ok. You used the "manual" way. The jailkit tools which are used in ispconfig have also a function to copy commands incl. their libraries into a jail:

http://olivier.sessink.nl/jailkit/jk_cp.8.html
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 26th November 2014, 15:30
gring gring is offline
Member
 
Join Date: Mar 2009
Posts: 53
Thanks: 2
Thanked 3 Times in 3 Posts
Default

Is it still the right way to do it.

And since it is a copy of the files, does it still work when mysql is updated ?

Thanks.
Reply With Quote
  #4  
Old 26th November 2014, 15:41
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,015
Thanks: 840
Thanked 5,652 Times in 4,461 Posts
Default

The purpose of a jail is to create a copy of system files and limit the user to use only the files in that jail. Jailkit provides alaos commands to update the files inside the jail.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 26th November 2014, 16:41
gring gring is offline
Member
 
Join Date: Mar 2009
Posts: 53
Thanks: 2
Thanked 3 Times in 3 Posts
 
Default

Thanks, so it means under Debian / Ubuntu you can't use unattended-upgrades and write instead a script that will first upgrade and then run the jail files update tool.
Reply With Quote
Reply

Bookmarks

Tags
chroot, give access, jailkit, mysql, ssh

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
MySQL Error Nolan Installation/Configuration 13 27th November 2014 06:04
Auth.log question spikes Server Operation 0 12th December 2010 22:24
CPU load locks up box. Apache or MYSQL related. crypted General 61 29th October 2010 23:16
Ruby / FastCGI Problem Chad Server Operation 1 8th March 2008 21:38
Can't Remote Access mysql 4.1 dedibox Installation/Configuration 2 24th August 2006 11:32


All times are GMT +2. The time now is 05:28.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.