Linux repositories inspector

jailkit - tools to make chroot jails easily

Jailkit is a set of utilities to limit user accounts to specific files using chroot() and or specific commands. Setting up a chroot shell, a shell limited to some specific command or a daemon inside a chroot jail is a lot easier and can be automated using these utilities.
Jailkit is a specialized tool that is developed with a focus on security. It will abort in a secure way if the configuration, the system setup or the environment is not 100% secure, and it will send useful log messages that explain what is wrong to syslog.
Jailkit is known to be used in network security appliances from several leading IT security firms, Internet servers from several large enterprise organizations, Internet servers from Internet service providers, as well as many smaller companies and private users that need to secure login in services or in daemon processes.
Currently, Jailkit provide jails for cvs, git, scp sftp, ssh, rsync, procmail, openvpn, vnc, etc.
Jailkit make available the following commands: jk_check, jk_chrootlaunch, jk_chrootsh, jk_cp, jk_init, jk_jailuser, jk_list, jk_lsh, jk_socketd, jk_uchroot, jk_update.
Debian iconDebian 10.0
Ubuntu iconUbuntu 20.04
Debian iconDebian 10.0 buster-backports/maindeb2.21-2~bpo10+12019-11-1865.7 kiB291 kiB
Ubuntu iconUbuntu 20.04 focal/universedeb2.21-22020-01-0766.1 kiB303 kiB

Manual pages


jailkit - utilities for jailing a user or process


jk_check - a utility that will check a jail for security problems


jk_chrootlaunch - a launcher that can start a daemon in a jail, with a specified uid and gid


jk_chrootsh - a shell that will put the user inside a changed root


jk_cp - a utility to copy files including permissions and libraries into a jail


jk_init - a utility to quicky create functional jail directories


jk_jailuser - a utility to put an existing user in a jail


jk_list - a utility to list all processes in a chroot jail


jk_lsh - a shell that limits the binaries it will execute


jk_socketd - a daemon to create a rate-limited /dev/log socket inside a chroot


jk_uchroot - grant regular users the right to change root into certain directories


jk_update - a utility to update and cleanup a jail according to changes on the real system

Latest updates

Ubuntu icon

Ubuntu 20.04 focal/universe: Version 2.21-2 introduced

  • Upload to unstable.
  • debian/patches/10_ignore-python2.patch: removed in favor of an override in debian/rules.
  • debian/rules: created the override_dh_auto_configure to pass "python3" as value for PYTHONINTERPRETER in configure file.
  • debian/salsa-ci.yml: added to provide CI tests for Salsa.
  • debian/tests/control: added a new test.
Debian icon

Debian 10.0 buster-backports/main: Version 2.21-2~bpo10+1 reintroduced

Debian icon

Debian 10.0 buster-backports/main: Version 2.21-2~bpo10+1 removed

Debian icon

Debian 10.0 buster-backports/main: Version 2.21-2~bpo10+1 introduced

Debian icon

Debian experimental experimental/main: Version 2.21-1 removed

Debian icon

Debian experimental experimental/main: Version 2.21-1 introduced

⇧ Top