From 3872f930639fa6c2b8be9f3471f2ea463063bcbf Mon Sep 17 00:00:00 2001 From: Jose Date: Fri, 24 Jul 2020 15:37:50 -0400 Subject: [PATCH] Post-creation jail misc configuration --- usr/local/share/bastille/create.sh | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/usr/local/share/bastille/create.sh b/usr/local/share/bastille/create.sh index ef149e7b..7c31d0d8 100644 --- a/usr/local/share/bastille/create.sh +++ b/usr/local/share/bastille/create.sh @@ -388,6 +388,14 @@ create_jail() { ## Generate minimal configuration for empty jail generate_minimal_conf fi + + # Post-creation jail misc configuration + # Creates a dummy fstab file + # Disables adjkerntz, avoids spurious error messages + # Set strict permissions on the jail by default + touch "etc/fstab" + sed -i '' 's|[0-9],[0-9]\{2\}.*[0-9]-[0-9].*root.*kerntz -a|#& # Disabled by bastille|' "etc/crontab" + chmod 0700 "${bastille_jailsdir}/${NAME}" } # Handle special-case commands first.