; A copy of some devices and system files is needed within the chroot jail ; Chroot conflicts with configuration file reload and many other features chroot = /var/lib/stunnel4/ ; Chroot jail can be escaped if setuid option is not used setuid = stunnel4 setgid = stunnel4 ; PID is created inside the chroot jail pid = /stunnel4.pid ; Debugging stuff (may useful for troubleshooting) ;debug = 7 ;output = /var/log/stunnel4/stunnel.log [mysql1] client = yes accept = 127.0.0.1:3306 connect = mydb.cms.hu-berlin.de:13306 [mysql2] client = yes accept = 127.0.0.1:3307 connect = mydb.cms.hu-berlin.de:13307 [mysql3] client = yes accept = 127.0.0.1:3308 connect = mydb.cms.hu-berlin.de:13308 [mysql4] client = yes accept = 127.0.0.1:3309 connect = mydb.cms.hu-berlin.de:13309 [mysql5] client = yes accept = 127.0.0.1:3310 connect = mydb.cms.hu-berlin.de:13310 [myblob] client = yes accept = 127.0.0.1:4306 connect = myblob.cms.hu-berlin.de:13306