# Jailkit

**URL:** <https://forum.virtualmin.com/t/jailkit/32590>\
**Category:** Virtualmin\
**Created:** [April 21, 2009, 8:41pm UTC](https://forum.virtualmin.com/t/jailkit/32590 "2009-04-21T20:41:12Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![jaldeguer](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/j/5fc32e/32.png) [@jaldeguer](https://forum.virtualmin.com/u/jaldeguer)\
**Post date:** [April 21, 2009, 8:41pm UTC](https://forum.virtualmin.com/t/jailkit/32590/1 "2009-04-21T20:41:12Z")

</div>

I read a post here about jailkit being considered to provide chrooting SSH. I have already successfully used it on my Virtualmin GPL server. I was also pleasantly surprised to find out how easy it was to chroot a user using jailkit. Is this already included in the pro version?

---

<div class="post-metadata">

**Author:** ![Eric](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/e/898d66/32.png) [@Eric](https://forum.virtualmin.com/u/Eric)\
**Post date:** [April 21, 2009, 8:44pm UTC](https://forum.virtualmin.com/t/jailkit/32590/2 "2009-04-21T20:44:34Z")

</div>

No, it’s not being included now, though they’re exploring using a similar feature available in more recent SSH versions.

Some thoughts on that are included in this bug report:

[http://www.virtualmin.com/index.php?option=com\_flyspray&Itemid=82&do=details&task\_id=5620&Itemid=82](http://www.virtualmin.com/index.php?option=com_flyspray&Itemid=82&do=details&task_id=5620&Itemid=82)

---

<div class="post-metadata">

**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\
**Post date:** [April 21, 2009, 8:54pm UTC](https://forum.virtualmin.com/t/jailkit/32590/3 "2009-04-21T20:54:36Z")

</div>

Actually, it is very unlikely chroot will ever be a standard feature in Virtualmin. No matter how easy it becomes, unless/until the serious security implications are corrected (which seems impossible, if I understand the issue correctly) we’re not going to encourage people to do something dangerous just because it _looks_ like better security.

The right solution, if there is one short of full virtualization (Xen) or near-virtualization (vservers, OpenVZ, Zones), will make use of SELinux rather than chroot. SELinux is and has always been intended as a security feature. chroot never has been. SELinux doesn’t break privilege separation. chroot does.

---

<div class="post-metadata">

**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\
**Post date:** [April 21, 2009, 9:03pm UTC](https://forum.virtualmin.com/t/jailkit/32590/4 "2009-04-21T21:03:03Z")

</div>

Oh, and we do have a product for managing Xen and vservers and Zones coming out in a few days.

---

<div class="post-metadata">

**Author:** ![jaldeguer](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/j/5fc32e/32.png) [@jaldeguer](https://forum.virtualmin.com/u/jaldeguer)\
**Post date:** [April 21, 2009, 9:50pm UTC](https://forum.virtualmin.com/t/jailkit/32590/5 "2009-04-21T21:50:43Z")

</div>

Thanks for the clarification. Looking forward to the new product managing xen servers!!!

---

<div class="post-metadata">

**Author:** ![hescominsoon](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/hescominsoon/32/2358_2.png) [@hescominsoon](https://forum.virtualmin.com/u/hescominsoon)\
**Post date:** [August 10, 2017, 2:05am UTC](https://forum.virtualmin.com/t/jailkit/32590/6 "2017-08-10T02:05:26Z")

</div>

supporting cloudlinux would address the issues jailkit intends to solve.

---

<div class="post-metadata">

**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\
**Post date:** [August 11, 2017, 8:31pm UTC](https://forum.virtualmin.com/t/jailkit/32590/7 "2017-08-11T20:31:50Z")

</div>

No, it wouldn’t. Cloudlinux isn’t needed for any of the things we’re using jailkit for.

---

<div class="post-metadata">

**Author:** ![michelv](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/m/87869e/32.png) [@michelv](https://forum.virtualmin.com/u/michelv)\
**Post date:** [July 22, 2018, 2:59pm UTC](https://forum.virtualmin.com/t/jailkit/32590/8 "2018-07-22T14:59:41Z")

</div>

So I see the option “Base directory for Jailkit directories” under Virtualmin configuration. Does that mean jailkit is now supported by virtualmin? Do I need to install it seperately?

---

<div class="post-metadata">

**Author:** ![Joe](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/joe/32/9_2.png) [@Joe](https://forum.virtualmin.com/u/Joe)\
**Post date:** [July 31, 2018, 10:18pm UTC](https://forum.virtualmin.com/t/jailkit/32590/9 "2018-07-31T22:18:04Z")

</div>

Jailkit is supported in Virtualmin, yes. And, you only need to install something if you installed long enough ago that it wasn’t part of the default installation (if you installed using a 6.x version of the installer, you already have it, if you didn’t you don’t). There’s probably some minor other config stuff to do, I don’t remember how much we handle in Virtualmin and how much we handle in the installer in terms of setting it up and configuring it.

---

<div class="post-metadata">

**Author:** ![system](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/cd96d761e326db4b2bef94886a639109bd7a8e76.svg) [@system](https://forum.virtualmin.com/u/system)\
**Post date:** [April 30, 2020, 5:45am UTC](https://forum.virtualmin.com/t/jailkit/32590/10 "2020-04-30T05:45:48Z")

</div>

Closed on April 30, 2020, 5:45am UTC


