BUG: jail=2

[factor]

From my system. Never set this as its not in my process.
da c | grep jail
jail=2

Something updated the default from 0

Must be this

    #enable jail=2 server-wide
    if [ -s ${DACONF_FILE} ]; then
        if ! grep -q -m1 'jail=0' ${DACONF_FILE}; then
            setVal jail 2 ${DACONF_TEMPLATE_FILE}
            setVal jail 2 ${DACONF_FILE}
            doRestartDA
        fi
    fi

the template is changed
cat directadmin.conf
#DirectAdmin config file
#For full listing of set variables, run: /usr/local/directadmin/directadmin c
#For information on a given variable, search it in the versions system: https://directadmin.com/versions.php
#More information on setting values to the directadmin.conf: https://help.directadmin.com/item.php?id=641
.......
.......
nginx_proxy=0
litespeed=0
openlitespeed=0
frontpage_on=0
apache_ver=2.0
jail=2
pureftp=0

from https://docs.directadmin.com/directadmin/general-usage/all-directadmin-conf-values#jail

jail​

jail=0

Use bubblewrap to jail users (cronjobs, shell and PHP-FastCGI). Use CustomBuild to install bubblewrap, it sets the DirectAdmin value automatically.

Value	Comment
0	jail disabled completely
1	jail is enabled by default, but can be personally disabled per package, reseller.conf or user.conf
2	jail is enabled forcefully for all

Please check it to making a correction to the system. So we can avoid this issue from happening.

@smtalk @DirectAdmin Support

Sorry I put it here it needs to be in CB2 I suppose.

 

[smtalk]

Thank you for the report, it should have been set to 1. Fixed!

 

[k1l0b1t]

@smtalk perhaps add it to docs.directadmin.com, some info on how bubblewrap etc works would be nice.

 

[factor]

it should have been set to 1

Shouldn't it be 0?

The docs show the default as 0 as in off.

 

[smtalk]

Shouldn't it be 0?

The docs show the default as 0 as in off.

1 lets you control who should have it turned on (in user packages).

 

[k1l0b1t]

@smtalk are there any steps if i actualy want to enable this? (Apart from installing bwrap and jailshell). And does it have any caveats? (i read something with exim a while back)

 

[smtalk]

@smtalk are there any steps if i actualy want to enable this? (Apart from installing bwrap and jailshell). And does it have any caveats? (i read something with exim a while back)

Exim should work just fine. There should be a “Jail” checkbox when modifying user or user package.

 

[factor]

Now all you need to do is add a remove routine for brwrap, jailshell and redis