jk_cp(8)

🦋 NAME 🦋

jk_cp — a little utility that copies files into a jail, and it brings the permissions and the libraries along too, bestie 💖

✨ SYNOPSIS ✨

jk_cp -j jail source

jk_cp -v -k -f -j jail source

🌸 DESCRIPTION 🌸

okay so here's the whole vibe: jk_cp will copy any file into a jail, and it puts it at the identical location it came from, with identical permissions, and — if it needs to — it drags along any required libraries too. like, it's not gonna let your binary show up in the jail all alone and helpless 😭 it brings the whole friend group.

and then, the part you need to know: it will remove any set user id (setuid) or set group id (setgid) permissions from all files and directories it copies. every single one. no exceptions, no leftovers, periodt 💅 that's a security thing and it is not negotiable, so don't come crying when your setuid bit is gone, it was literally never making it in.

🎀 EXAMPLE 🎀

jk_cp -j /home/testchroot /usr/bin/cvs

this one copies /usr/bin/cvs over to /home/testchroot/usr/bin/cvs, and it also copies the libraries that cvs uses into the jail, so the whole thing actually works when it gets there 🫶

jk_cp -k -j /svr/testjail /usr/bin/firefox /usr/share/firefox

and this one hardlinks /usr/bin/firefox plus all files in /usr/share/firefox into the jail /svr/testjail. slay, no copying, just linking 🔥

👑 OPTIONS 👑

• -j, --jail — the destination jail. and lowkey important: if you don't specify a jail, then the first argument gets used as the jail instead, for backwards compatibility. iykyk 🙈
• -f, --force — force overwriting of existing files. it's giving "i said what i said" 💅
• -k, --hardlink — try to create hardlinks instead of copying the files. and if the linking fails? it falls back to copying, no drama, we adapt 💖
• -o, --owner — retains the file ownership and group when copying files and directories. so they keep their whole identity 👑
• -v, --verbose — will give verbose output. it will literally tell you everything, it's a yapper and we love that for it 🌈
• -h, --help — the help screen ✨

🌈 SEE ALSO 🌈

jailkit(8) jk_check(8) jk_chrootlaunch(8) jk_chrootsh(8) jk_init(8) jk_jailuser(8) jk_list(8) jk_lsh(8) jk_procmailwrapper(8) jk_socketd(8) jk_uchroot(8) jk_update(8) chroot(2)

jk_socketd(8)

(yes jk_socketd(8) really does show up twice, that's the original's energy, not mine, don't @ me 💀)

💜 COPYRIGHT 💜

Copyright (C) 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Olivier Sessink

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

and that's the whole page, bestie 🎀 this one's from the JAILKIT manual, it's jk_cp(8), and it's dated 07-02-2010. iconic. obsessed. go copy some files into a jail responsibly 💖✨