[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Any HOWTOs for setting up a chroot jail for ssh users?



On Wed, Feb 13, 2002 at 02:07:06PM +0100, Allan wrote:
| Am Wed, Feb 13, 2002 at 01:55:51PM +0100, schrieb Paul de Weerd:
| > On Wed, Feb 13, 2002 at 01:48:41PM +0100, Allan wrote:
| > | For those jailed users it should be possible to copy and execute binaries 
| > | in their home directories.  You can not really restrict what programs they
| > | can run. 
| > 
| > You could mount your fs with noexec (see mount(8)), restricting all
| > execution of uploaded binaries.
| 
| hm, noexec should not be very kool, what about "${CHROOT}/bin/sh"?

What about "${CHROOT}/bin/sh" on yet another, for the user
unwriteable, fs ?

| > Just my 0.02 euros,
| 
| 2 cent, right?

This is adding up pretty quickly ;)

Paul 'WEiRD' de Weerd

-- 
>++++++++[<++++++++++>-]<+++++++.>+++[<------>-]<.>+++[<+
+++++++++++>-]<.>++[<------------>-]<+.--------------.[-]