isaacclad/ladill-hosting
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
121 Commits 2 Branches 0 Tags
335c0fea615b83eb85b310043257deda7b09688d
Commit Graph
4 Commits
Author SHA1 Message Date
isaaccladandClaude Opus 4.8 75ba450938 Terminal: show the live full working-directory path in the toolbar
Deploy Ladill Hosting / deploy (push) Successful in 45s
Details 
The toolbar showed a static ~/public_html. The jailed shell now reports its cwd
via OSC 7 each prompt (jail rcfile keeps the user's prompt + emits it); xterm
captures it and the toolbar shows the full path (/home/<user>/...), updating as
the user cd's. Launcher/rcfile committed in deployment/ for reproducibility.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-27 07:53:48 +00:00
isaaccladandClaude Opus 4.8 d54ae879b6 Jailed terminal: per-session passwd so customers can't enumerate tenants
Deploy Ladill Hosting / deploy (push) Successful in 39s
Details 
The jail's /etc/passwd listed every hosting username (no passwords — shadow isn't
in the jail — but it enumerated tenants). The launcher now binds a per-session
/etc/passwd|group (root + the current user only) inside each session's mount
namespace, and the shared jail passwd no longer carries hosting users.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-27 07:22:47 +00:00
isaaccladandClaude Opus 4.8 f7bba4d453 Jailed terminal: per-session tmpfs /home so users see only their own folder
Deploy Ladill Hosting / deploy (push) Successful in 1m41s
Details 
Inside the jail, 'cd ..' from the home landed in a non-listable /home (Permission
denied). Mount a per-session tmpfs over the jail's /home containing only the
user's own directory, so 'ls /home' shows just their folder — no other tenants
leaked, confinement unchanged. (Live host launcher already updated.)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-27 06:58:29 +00:00
isaaccladandClaude Opus 4.8 2a1228b40e Jail the control-panel terminal to the customer's home (chroot)
Deploy Ladill Hosting / deploy (push) Successful in 45s
Details 
SECURITY: the browser terminal ran an unconfined login shell as the account's
system user, so customers could browse the whole host (/var/www, other tenants,
/etc). Run it inside a jailkit chroot instead: a vetted, sudo-scoped launcher
(/usr/local/sbin/ladill-jailsh) enters a private mount namespace, bind-mounts
ONLY that user's home into /home/jail, and chroots as the user. They can no
longer see anything outside their own home. Provisioning committed in
deployment/ (setup-terminal-jail.sh + ladill-jailsh) so it is reproducible.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-26 23:41:18 +00:00