chrootssh-users Mailing List for OpenSSH Chroot Patch (Page 34)
Brought to you by:
punkball
Menu
▾
▴
chrootssh-users — A mailing list primarily for informing users of new releases
You can subscribe to this list here.
| 2002 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(2) |
Jun
(1) |
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
(1) |
Dec
(6) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2003 |
Jan
(5) |
Feb
|
Mar
(11) |
Apr
(11) |
May
(11) |
Jun
(9) |
Jul
(2) |
Aug
(9) |
Sep
(10) |
Oct
(8) |
Nov
(18) |
Dec
(12) |
| 2004 |
Jan
(4) |
Feb
|
Mar
(3) |
Apr
(19) |
May
(20) |
Jun
(36) |
Jul
(20) |
Aug
(13) |
Sep
(8) |
Oct
(12) |
Nov
(19) |
Dec
(18) |
| 2005 |
Jan
(4) |
Feb
(9) |
Mar
(21) |
Apr
(17) |
May
(17) |
Jun
(28) |
Jul
(24) |
Aug
(28) |
Sep
(31) |
Oct
(31) |
Nov
(35) |
Dec
(20) |
| 2006 |
Jan
(15) |
Feb
(13) |
Mar
(4) |
Apr
(5) |
May
(5) |
Jun
(9) |
Jul
(5) |
Aug
(7) |
Sep
(5) |
Oct
(18) |
Nov
(22) |
Dec
(16) |
| 2007 |
Jan
(19) |
Feb
(24) |
Mar
(34) |
Apr
(32) |
May
(19) |
Jun
(25) |
Jul
(14) |
Aug
(38) |
Sep
(46) |
Oct
(20) |
Nov
(11) |
Dec
(20) |
| 2008 |
Jan
(14) |
Feb
(10) |
Mar
(51) |
Apr
(24) |
May
(22) |
Jun
(24) |
Jul
(43) |
Aug
(28) |
Sep
(26) |
Oct
(44) |
Nov
(79) |
Dec
(44) |
| 2009 |
Jan
(19) |
Feb
(9) |
Mar
(18) |
Apr
(46) |
May
(109) |
Jun
(100) |
Jul
(74) |
Aug
(29) |
Sep
(24) |
Oct
(43) |
Nov
(8) |
Dec
(18) |
| 2010 |
Jan
(4) |
Feb
(7) |
Mar
(41) |
Apr
(59) |
May
(68) |
Jun
(57) |
Jul
(48) |
Aug
(50) |
Sep
(25) |
Oct
(5) |
Nov
(4) |
Dec
(6) |
| 2011 |
Jan
(4) |
Feb
(3) |
Mar
(2) |
Apr
|
May
(5) |
Jun
(10) |
Jul
(5) |
Aug
|
Sep
(2) |
Oct
(2) |
Nov
(4) |
Dec
(2) |
| 2012 |
Jan
(2) |
Feb
(4) |
Mar
(1) |
Apr
(1) |
May
(1) |
Jun
|
Jul
(1) |
Aug
(2) |
Sep
|
Oct
(2) |
Nov
|
Dec
|
| 2013 |
Jan
(3) |
Feb
(4) |
Mar
|
Apr
(1) |
May
(1) |
Jun
|
Jul
(1) |
Aug
(2) |
Sep
(6) |
Oct
(1) |
Nov
|
Dec
(1) |
| 2014 |
Jan
(1) |
Feb
|
Mar
(2) |
Apr
(3) |
May
(3) |
Jun
(3) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2015 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
(2) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2016 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
|
Jul
(1) |
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Aaron L. <al...@na...> - 2003-05-27 22:29:39
|
Greets everyone- I have a redhat 9 chroot'ed box all set up and running with one issue. SFTP and SCP both hang at the password prompt. SSH runs perfectly, and with a hosts file in the chroot, I can ssh/scp/sftp anywhere. However when I SFTP or SCP to the box, I get prompted for my password, it appears to accept it, and then hangs. I have checked the ssh and sftp-server binary against ldd to be sure I have all the libraries I need, and I can't figure out what I'm missing. I've also run strace on the server, as well as run sshd with -d -d -d and everything looks as can be expected. This is the output from sftp -v -v -v (starting at the password prompt, until the point it hangs): user@host's password: debug3: packet_send2: adding 48 (len 61 padlen 19 extra_pad 64) debug2: we sent a password packet, wait for reply debug1: ssh-userauth2 successful: method password debug1: fd 4 setting O_NONBLOCK debug2: fd 5 is O_NONBLOCK debug1: channel 0: new [client-session] debug3: ssh_session2_open: channel_new: 0 debug1: send channel open 0 debug1: Entering interactive session. debug2: callback start debug1: ssh_session2_setup: id 0 debug1: Sending subsystem: sftp debug1: channel request 0: subsystem debug2: callback done debug1: channel 0: open confirm rwindow 0 rmax 32768 debug2: channel 0: rcvd adjust 131072 # It hangs at that point. # When I sftp as root, which is not chrooted, it gets the next 3 lines # and then the sftp prompt debug2: Remote version: 3 debug3: Sent message fd 3 T:16 I:1 debug3: SSH_FXP_REALPATH . -> /root sftp> I can send more debugging output from the server side, although it doesn't appear to be all that useful. It looks exactly the same as a non-chroot'ed user, except the chroot'ed users connection hangs at the passwd prompt. /var/log/messages say the user has logged in successfully and ps shows that the sftp process is running. I'm totally stuck. Any suggestions or information would be *greatly* appreciated. -=Aaron |
|
From: <ge...@in...> - 2003-05-23 08:30:04
|
Hi all,
I have installed correctly chrootssh, and I=B4v configured a chroot
environment like the manual, but... when I execute:
chroot /path/to/chroot/ bin/sh
chroot: cannot execute bin/sh: No such file or directory
(/bin/sh is really in my chroot path)
I execute strace but I can=B4t find the error:
execve("/usr/sbin/chroot", ["chroot", "/path/to/chroot/", "bin/sh"], [/* =
25
vars */]) =3D 0
uname({sys=3D"Linux", node=3D"my.host.com", ...}) =3D 0
brk(0) =3D 0x804b624
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,=
0)
=3D 0x40017000
open("/etc/ld.so.preload", O_RDONLY) =3D -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D43271, ...}) =3D 0
old_mmap(NULL, 43271, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x40018000
close(3) =3D 0
open("/lib/i686/libc.so.6", O_RDONLY) =3D 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\307\1"..., 1024=
) =3D
1024
fstat64(3, {st_mode=3DS_IFREG|0755, st_size=3D5792713, ...}) =3D 0
old_mmap(NULL, 1293384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =3D 0x400=
23000
mprotect(0x40156000, 35912, PROT_NONE) =3D 0
old_mmap(0x40156000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, =
3,
0x132000) =3D 0x40156000
old_mmap(0x4015b000, 15432, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) =3D 0x4015b000
close(3) =3D 0
munmap(0x40018000, 43271) =3D 0
brk(0) =3D 0x804b624
brk(0x804b64c) =3D 0x804b64c
brk(0x804c000) =3D 0x804c000
open("/usr/share/locale/locale.alias", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D2601, ...}) =3D 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)=
=3D
0x40018000
read(3, "# Locale name alias data base.\n#"..., 4096) =3D 2601
brk(0x804d000) =3D 0x804d000
read(3, "", 4096) =3D 0
close(3) =3D 0
munmap(0x40018000, 4096) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_IDENTIFICATION", O_RDONLY) =3D -1 ENO=
ENT
(No such file or directory)
open("/usr/lib/locale/es_ES@euro/LC_IDENTIFICATION", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D433, ...}) =3D 0
mmap2(NULL, 433, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x40018000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_MEASUREMENT", O_RDONLY) =3D -1 ENOENT=
(No
such file or directory)
open("/usr/lib/locale/es_ES@euro/LC_MEASUREMENT", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D29, ...}) =3D 0
mmap2(NULL, 29, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x40019000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_TELEPHONE", O_RDONLY) =3D -1 ENOENT (=
No
such file or directory)
open("/usr/lib/locale/es_ES@euro/LC_TELEPHONE", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D55, ...}) =3D 0
mmap2(NULL, 55, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x4001a000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_ADDRESS", O_RDONLY) =3D -1 ENOENT (No=
such
file or directory)
open("/usr/lib/locale/es_ES@euro/LC_ADDRESS", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D133, ...}) =3D 0
mmap2(NULL, 133, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x4001b000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_NAME", O_RDONLY) =3D -1 ENOENT (No su=
ch
file or directory)
open("/usr/lib/locale/es_ES@euro/LC_NAME", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D68, ...}) =3D 0
mmap2(NULL, 68, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x4001c000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_PAPER", O_RDONLY) =3D -1 ENOENT (No s=
uch
file or directory)
open("/usr/lib/locale/es_ES@euro/LC_PAPER", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D40, ...}) =3D 0
mmap2(NULL, 40, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x4001d000
close(3) =3D 0
brk(0x804e000) =3D 0x804e000
open("/usr/lib/locale/es_ES+euro/LC_MESSAGES", O_RDONLY) =3D -1 ENOENT (N=
o
such file or directory)
open("/usr/lib/locale/es_ES@euro/LC_MESSAGES", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFDIR|0755, st_size=3D4096, ...}) =3D 0
close(3) =3D 0
open("/usr/lib/locale/es_ES@euro/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY) =
=3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D60, ...}) =3D 0
mmap2(NULL, 60, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x4001e000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_MONETARY", O_RDONLY) =3D -1 ENOENT (N=
o
such file or directory)
open("/usr/lib/locale/es_ES@euro/LC_MONETARY", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D296, ...}) =3D 0
mmap2(NULL, 296, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x4001f000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_COLLATE", O_RDONLY) =3D -1 ENOENT (No=
such
file or directory)
open("/usr/lib/locale/es_ES@euro/LC_COLLATE", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D21980, ...}) =3D 0
mmap2(NULL, 21980, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x4015f000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_TIME", O_RDONLY) =3D -1 ENOENT (No su=
ch
file or directory)
open("/usr/lib/locale/es_ES@euro/LC_TIME", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D2377, ...}) =3D 0
mmap2(NULL, 2377, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x40020000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_NUMERIC", O_RDONLY) =3D -1 ENOENT (No=
such
file or directory)
open("/usr/lib/locale/es_ES@euro/LC_NUMERIC", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D60, ...}) =3D 0
mmap2(NULL, 60, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x40021000
close(3) =3D 0
open("/usr/lib/locale/es_ES+euro/LC_CTYPE", O_RDONLY) =3D -1 ENOENT (No s=
uch
file or directory)
open("/usr/lib/locale/es_ES@euro/LC_CTYPE", O_RDONLY) =3D 3
fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D173660, ...}) =3D 0
mmap2(NULL, 173660, PROT_READ, MAP_PRIVATE, 3, 0) =3D 0x40165000
brk(0x804f000) =3D 0x804f000
close(3) =3D 0
chroot("/path/to/chroot/") =3D 0
chdir("/") =3D 0
execve("bin/sh", ["bin/sh"], [/* 25 vars */]) =3D -1 ENOENT (No such file=
or
directory)
open("/usr/share/locale/es_ES+euro/LC_MESSAGES/sh-utils.mo", O_RDONLY) =3D=
-1
ENOENT (No such file or directory)
open("/usr/share/locale/es_ES@euro/LC_MESSAGES/sh-utils.mo", O_RDONLY) =3D=
-1
ENOENT (No such file or directory)
open("/usr/share/locale/es@euro/LC_MESSAGES/sh-utils.mo", O_RDONLY) =3D -=
1
ENOENT (No such file or directory)
open("/usr/share/locale/es+euro/LC_MESSAGES/sh-utils.mo", O_RDONLY) =3D -=
1
ENOENT (No such file or directory)
open("/usr/share/locale/es_ES/LC_MESSAGES/sh-utils.mo", O_RDONLY) =3D -1
ENOENT (No such file or directory)
open("/usr/share/locale/es/LC_MESSAGES/sh-utils.mo", O_RDONLY) =3D -1 ENO=
ENT
(No such file or directory)
write(2, "chroot: ", 8chroot: ) =3D 8
write(2, "cannot execute bin/sh", 21cannot execute bin/sh) =3D 21
open("/usr/share/locale/es_ES+euro/LC_MESSAGES/libc.mo", O_RDONLY) =3D -1
ENOENT (No such file or directory)
open("/usr/share/locale/es_ES@euro/LC_MESSAGES/libc.mo", O_RDONLY) =3D -1
ENOENT (No such file or directory)
open("/usr/share/locale/es@euro/LC_MESSAGES/libc.mo", O_RDONLY) =3D -1 EN=
OENT
(No such file or directory)
open("/usr/share/locale/es+euro/LC_MESSAGES/libc.mo", O_RDONLY) =3D -1 EN=
OENT
(No such file or directory)
open("/usr/share/locale/es_ES/LC_MESSAGES/libc.mo", O_RDONLY) =3D -1 ENOE=
NT
(No such file or directory)
open("/usr/share/locale/es/LC_MESSAGES/libc.mo", O_RDONLY) =3D -1 ENOENT =
(No
such file or directory)
write(2, ": No such file or directory", 27: No such file or directory) =3D=
27
write(2, "\n", 1
) =3D 1
_exit(1) =3D ?
Can anybody help me?
Gerard Farr=E0s
|
|
From: <aa...@na...> - 2003-05-20 03:35:58
|
Greets everyone- I have a redhat 9 chroot'ed box all set up and running with one issue. SFTP and SCP both hang at the password prompt. SSH runs perfectly, and with a hosts file in the chroot, I can ssh anywhere. However when I SFTP or SCP to the box, I get prompted for my password, it appears to accept it, and then hangs. I have checked the ssh and sftp-server binary against ldd to be sure I have all the libraries I need, and I can't figure out what I'm missing. I've also run strace on the server, and everything looks as can be expected, although there isn't much strace output at the point where it hangs. This is the output from sftp -v (starting at the password prompt, until the point it hangs): user@host's password: debug1: ssh-userauth2 successful: method password debug1: fd 4 setting O_NONBLOCK debug1: channel 0: new [client-session] debug1: send channel open 0 debug1: Entering interactive session. debug1: ssh_session2_setup: id 0 debug1: Sending subsystem: sftp debug1: channel request 0: subsystem debug1: channel 0: open confirm rwindow 0 rmax 32768 I can send more output from the server side, although neither appear to be all that useful. It looks exactly the same as a non-chroot'ed user, except the chroot'ed users connection hang at the passwd prompt. /var/log/messages say the user has logged in successfully. I'm totally stuck. Any suggestions or information would be *greatly* appreciated. -=Aaron |
|
From: Rich R. <rr...@np...> - 2003-05-19 18:19:34
|
Here's the snapshot from /var/log/messages. SSHD is run from xinetd. I keep thinking it's some sort of environment problem, but since v3.2.3p1 works, I can't explain the difference. ------| This is version 3.2.3p1. The login was successful. The user ssync is CHROOTED |-------------- May 16 12:32:07 armstrong sshd[13188]: Connection from 205.153.39.91 port 1226 May 16 12:32:07 armstrong sshd[13188]: Enabling compatibility mode for protocol 2.0 May 16 12:32:08 armstrong sshd[13188]: Failed none for ssync from 205.153.39.91 port 1226 ssh2 May 16 12:32:08 armstrong sshd[13188]: Found matching DSA key: (the DSA key listed here) May 16 12:32:08 armstrong sshd[13188]: Postponed publickey for ssync from 205.153.39.91 port 1226 ssh2 May 16 12:32:08 armstrong sshd[13188]: Found matching DSA key: (the DSA key listed here) May 16 12:32:08 armstrong sshd[13188]: Accepted publickey for ssync from 205.153.39.91 port 1226 ssh2 May 16 12:32:21 armstrong sshd[13188]: Connection closed by remote host. May 16 12:32:21 armstrong sshd[13188]: Closing connection to 205.153.39.91 ------| This is version 3.6.1p2 it does not work for CHROOTED users. The user ssync is CHROOTED |-------------- May 16 12:32:46 armstrong sshd[13190]: Connection from 205.153.39.91 port 1227 May 16 12:32:47 armstrong sshd[13190]: Failed none for ssync from 205.153.39.91 port 1227 ssh2 May 16 12:32:47 armstrong sshd[13190]: Found matching DSA key: (the DSA key listed here) May 16 12:32:47 armstrong sshd[13190]: Found matching DSA key: (the DSA key listed here) May 16 12:32:47 armstrong sshd[13190]: Accepted publickey for ssync from 205.153.39.91 port 1227 ssh2 2 R Rich Rarey |
|
From: James D. <jd...@la...> - 2003-05-16 17:46:59
|
Hey Greg and everyone, I've heard of things similar happening. It appears the chroot code in do_usersetcontext isn't executed on every system. It's supposed to be, which is why I put the code there, but sometimes it isn't. Unfortunately I've had no time to get to this. If anyone wants to check it out and submit a patch to the patch (hah!) I'd love it! If not, I probably can't get to it until about June 1st unless someone does my smalltalk homework for me! -James Greg Schwartz wrote: > Unless I'm missing something, compiling with --with-pam seems to break > this patch on RedHat 7.3. It works fine if I don't use the pam switch. > > Using --with-pam, sshd will not allow connections. > > Any advice? > > Greg |
|
From: James D. <jd...@la...> - 2003-05-16 16:29:04
|
Could you send server logs too? That's usually much more helpful than the client logs. -James Rich Rarey wrote: > I am upgrading the OpenSSH CHROOT versions from 3.2.3p1 to 3.6.1p2, but the > CHROOT aspect isn't working. > > I compiled James Dennis' OpenSSH-3.6.1p2-chroot using only this configure > switch: --with-ssl-dir=/usr/local/ssl > but sshd refuses to allow chrooted logins. Version 3.2.3p1 still works fine, > so I know the directories are correctly set up. > > Both James' patched version, and the pristine version that I patched (using > James' .diff patch), have the same characteristics: Non-CHROOT logins are > OK, but CHROOT logins fail. I checked sessions.c and the patches are in > place. > > The sshd debug logs don't show any differences between the two versions. > When I remove the /./ from the user's entry in /etc/passwd the login works > as expected. > > On the client side, using ssh -vvv, the logs are identical until the 169th > line. The following is the working version: > debug1: channel 0: request shell > debug2: callback done > debug1: channel 0: open confirm rwindow 0 rmax 32768 > debug2: channel 0: rcvd adjust 131072 > Last login: Fri May 16 10:20:17 2003 from (myserver.mydomain listed here) > > > Here's the non-working version (3.6.1p2): > > debug1: channel 0: request shell > debug2: callback done > debug1: channel 0: open confirm rwindow 0 rmax 32768 > debug1: channel_free: channel 0: client-session, nchannels 1 > debug3: channel_free: status: The following connections are open:\015 > #0 client-session (t4 r0 i0/0 o0/0 fd 4/5)\015 > > debug3: channel_close_fds: channel 0: r 4 w 5 e 6 > debug1: fd 1 clearing O_NONBLOCK > debug2: fd 2 is not O_NONBLOCK > Connection to (my sshd server's name) closed by remote host. > Connection to (my sshd server's name) closed. > debug1: Transferred: stdin 0, stdout 0, stderr 81 bytes in 0.0 seconds > debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 7416.9 > debug1: Exit status -1 > > I've reread all the documentation, and googled, but I can't see what's > wrong. > > Anyone (James?) see what I'm missing? > > > ------------------------------------------------------- > Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara > The only event dedicated to issues related to Linux enterprise solutions > www.enterpriselinuxforum.com > > _______________________________________________ > Chrootssh-users mailing list > Chr...@li... > https://lists.sourceforge.net/lists/listinfo/chrootssh-users > -- James Dennis Harvard Law School "Not everything that counts can be counted, and not everything that can be counted counts." |
|
From: Rich R. <rr...@np...> - 2003-05-16 16:00:55
|
I am upgrading the OpenSSH CHROOT versions from 3.2.3p1 to 3.6.1p2, but the CHROOT aspect isn't working. I compiled James Dennis' OpenSSH-3.6.1p2-chroot using only this configure switch: --with-ssl-dir=/usr/local/ssl but sshd refuses to allow chrooted logins. Version 3.2.3p1 still works fine, so I know the directories are correctly set up. Both James' patched version, and the pristine version that I patched (using James' .diff patch), have the same characteristics: Non-CHROOT logins are OK, but CHROOT logins fail. I checked sessions.c and the patches are in place. The sshd debug logs don't show any differences between the two versions. When I remove the /./ from the user's entry in /etc/passwd the login works as expected. On the client side, using ssh -vvv, the logs are identical until the 169th line. The following is the working version: debug1: channel 0: request shell debug2: callback done debug1: channel 0: open confirm rwindow 0 rmax 32768 debug2: channel 0: rcvd adjust 131072 Last login: Fri May 16 10:20:17 2003 from (myserver.mydomain listed here) Here's the non-working version (3.6.1p2): debug1: channel 0: request shell debug2: callback done debug1: channel 0: open confirm rwindow 0 rmax 32768 debug1: channel_free: channel 0: client-session, nchannels 1 debug3: channel_free: status: The following connections are open:\015 #0 client-session (t4 r0 i0/0 o0/0 fd 4/5)\015 debug3: channel_close_fds: channel 0: r 4 w 5 e 6 debug1: fd 1 clearing O_NONBLOCK debug2: fd 2 is not O_NONBLOCK Connection to (my sshd server's name) closed by remote host. Connection to (my sshd server's name) closed. debug1: Transferred: stdin 0, stdout 0, stderr 81 bytes in 0.0 seconds debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 7416.9 debug1: Exit status -1 I've reread all the documentation, and googled, but I can't see what's wrong. Anyone (James?) see what I'm missing? |
|
From: Greg S. <gr...@zs...> - 2003-05-13 19:48:30
|
Unless I'm missing something, compiling with --with-pam seems to break = this patch on RedHat 7.3. It works fine if I don't use the pam switch. Using --with-pam, sshd will not allow connections. Any advice? Greg |
|
From: Justin B. <jb...@in...> - 2003-05-13 18:06:31
|
Its easy to write one. In SRC_URI="" just add a line like this: http://chrootssh.sourceforge.net/download/osshChroot-<whatever version>.diff Then in src_unpack() {} add a line like this epatch ${DISTDIR}/osshChroot-<your version>.diff || die or if you want to use a use flag with it just do : if [ `use chroot` ]; then epatch ${DISTDIR}/osshChroot-<your version>.diff || die fi On Tue, 2003-05-13 at 13:10, Jean-Francois Patenaude wrote: > Hello, > > Is there any facilities to install the chroot patch in Gentoo/Linux ? > > i.e. USE="chroot" emerge openssh > > Beside that, do you know if there is any other facilities in Gentoo/Linux > to build the chroot jail ? I was thinking about doing a chroot in my > shell and re-install the portage tree and a bunch of applications in > the jail. Any other suggestions ? > > Jf. > > > > ------------------------------------------------------- > Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara > The only event dedicated to issues related to Linux enterprise solutions > www.enterpriselinuxforum.com > > _______________________________________________ > Chrootssh-users mailing list > Chr...@li... > https://lists.sourceforge.net/lists/listinfo/chrootssh-users |
|
From: Jean-Francois P. <jf....@be...> - 2003-05-13 17:12:23
|
Hello, Is there any facilities to install the chroot patch in Gentoo/Linux ? i.e. USE="chroot" emerge openssh Beside that, do you know if there is any other facilities in Gentoo/Linux to build the chroot jail ? I was thinking about doing a chroot in my shell and re-install the portage tree and a bunch of applications in the jail. Any other suggestions ? Jf. |
|
From: <sb...@or...> - 2003-05-08 11:30:27
|
$B!!!!!!!!!!!!!!!!!!!!L$>5Bz9-9p9p!v(B $B!c;v6H<T!dA4?.6(!&$4>5Bz$J$/$NG[?.$4MF<O$M$,$$$^$9!#(B $B$40U8+$O(B 03-5458-8163$B>5$j@lMQ(BT.F $B:#8eITMW$NJ}$O(Bhttp://orient-sky.com/deny.htm$B$K$F$*4j$$?=$7>e$2$^$9(B $B(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(B $B!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#32/1_$X$N0lJb(B $B!!!!!!!!!y"f"f"f"f"f!z"f"f"f"f"f!y"f"f"f"f"f!z"f"f"f"f"f!y(B $B!zJ]>Z;v6H$KIT67$J$7!&J]>Z$KG:$s$G$$$k?M$O!"B?$$$+$i!#(B3$B@iK|$0$i(B $B!!$$M_$7$$?M$OBgB??t$@$+$i!"<+J,$GJ]>Z8\Ld$K$J$j!"(B2$B2/!"(B3$B2/!"(B5$B2/(B9$B@i(B $BK|1_3MF@<T$KDI$$$D$-$^$7$g$&!#(B $B!!7hCG$H<B9T$O>Z5r$+$i!&>Z5r$OJ*E*>Z5r!&13$D$-$^$;$s!&qY$5$l$?$/$J$$(B $B?M$O>Z5r$r!*(B $B!!!!!!!z"f"f"f"f"f!y"f"f"f"f"f!z"f"f"f"f"f!y"f"f"f"f!z(B $B!!!!!!!!!!!!!!(B $B!!!!!!!!!!!!!!:#$+$i$G$bCY$/$"$j$^$;$s!*!*(B $B:#$,@d9%$N%A%c%s%9!*IT67$@$+$iDI$$Iw$N!VJ]>Z:_Bp8\Ld!aE9J^IT(B $BMW$N%3%s%S%KE9$N%*!<%J!<$HF1$8!W$K!*>Z5r3NG'>)Ne!">Z5rL5$7$O;v(B $B<BL5$7$H8+$F0B?4$N0U8+B?$$!#(B $B!!!|$3$A$i$+$i(B $B!!(B http://orient-sky.com/ $BL5NA$N;qNA$4@A5a$G$-$^$9!#(B $B!!(B $B!!(BHP$B$N%H%C%W%Z!<%8$@$18+$F;qNA@A5a$9$kJ}$,B?$$$G$9!#M}M3$O;qNA(B $B!!$NJ}$,2r$j0W$$!&$H$N$3$H$G$9!#(B $B!!!!!!!y"f"f"f"f"f!z"f"f"f"f"f!y"f"f"f"f"f!z"f"f"f"f"f!y(B $B$3$l$+$i$N0B?4$H$f$H$j$N6b3[$rL\;X$7$F!"$"$J$?$b8\Ld$K$J$j$^$;$s(B $B$+!)(B $BBh0lJb$H$7$F;qNA@A5a$r$7$F$/$@$5$$!#!!!!!!L5NA$G;qNA$rM9Aw$7$^$9!#(B $B;qNA$G$$$m$$$m$J;v<B$H>Z5r$r3NG'$7$F2<$5$$!#(B (I"$B>^6b#1#2#0K|1_%W%i%9(B=$B#7#4#4K|1_(I#$B$N8"Mx$r!*?M?t@hCe=g@)8B$K$D$-!"(B $B;j5^;qNA$r@A5a$7$F$/$@$5$$!*(B $B!!!!!!!!(B $B!!!!!!!!!|(B $B2?;v$b>Z5r$,0lHV$K;v<B$N>ZL@(B $B!!!|(B $B$=$NCf$G$bJ*E*>Z5r$,4V0c$$$J$$$N$O<~CN$NDL$j$G$9!#(B $BJ]>Zkz7t$GJ]>Z$NHa7`$rKI$0;v6H$G$9!#(B $B<R2q9W8%$r$7$J$,$i9bN(<}F~$rF@$i$l$^$9!#(B $B$^$?J]>Z$N@UG$$O$9$Y$?<uBw6(2q$,;}$A!"8\Ld$K$O0l@Z@UG$$O$"$j$^(B $B$;$s!#(B $BJ]>Z$N%j%9%/$O0l@Z$"$j$^$;$s!"$40B?4$r!#(B $B8\Ld8xG'HV9f$r;H$&$N$G$"$J$?$NL>A0$OC/$K$bCN$i$l$:$K=PMh$^$9!#(B $B!|$3$A$i$+$i(B $B!!(Bhttp://orient-sky.com/ $B!!L5NA$N;qNA$4@A5a$G$-$^$9!#(B $B!}8D?M!":_Bp!"7s6H$G!"#22/1_!"#32/1_!"#52/#9@iK|1_$N<}F~<TB3=P>Z(B $B!!5rM-$j$^$9!&8+$;$^$9!&2?;v$bqY$5$l$?$/$J$$0Y$K@'Hs!">Z5r$N3NG'(B $B!!!z(B--$B!z(B--$B!~(B--$B!z!!%M%C%H%P%V%k$NJx2u$N8=67!!!z(B--$B!~(B--$B!z(B--$B!~(B $B!|%M%C%H%S%8%M%9$G!V8D?M$NG/<}#5@iK|1_0J2<$NJ}!9!W$O!V6%AhAj<jF1(B $B!!6H<T2a>j6H<o!W$,860x$H8@$o$l$F$$$^$9!#(B $B!|_'C+$N0l$D$N%S%k$K#2#3<T!J<R!&I{6H!&(BSOHO$B!K$$$^$7$?$,!":#$O!"#1!!(B $B!!?M$@$1$K$J$j!"BgItJ,$O6a$/$N!V%Q%=%3%sGc$$<h$jE9!W$KGd5Q$7$?$H$N!!(B $B!!>pJs$G$9!#(B $B!!@5$K%M%C%H%P%V%k$NJx2u$r>]D'$7$?8=>]$G$9!#(B $B!!%9!<%Q!<!&%G%Q!<%H!&>&E9$G$b!V%G%U%l!W$NGH$GGQ6H!"=L>.$N;~Be$G$9!#(B $B(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(B $B!!!!!z(B--$B!~(B--$B!zJ]>Z>Z7tH/9TJ]>Z0z$-<u$1;v6H$O!z(B--$B!~(B--$B!z(B $B!!!!!!!!!z(B--$B!~!!F|K\$G;O$a$FEv6(2q$G3+H/$7#3#7G/!!!z(B--$B!~(B $B!!!!!z(!(!(!!&!&!&(!(!(!(!!&!&!&!&(!(!(!!&!&!&(!(!(!!&!&!&(!!=!=!z(B $BJ]>Z>Z7t$GJ]>Z$NHa7`$r8*Be$o$j$9$k#1#5<o>Z7t!a>Z7tJ]>Z%5!<%S%9(B $B!W$r><OB#4#1G/$+$iH/9T$7$FA49qE*$KJ]>Z$7$F$$$k$N$OF|K\$GM#0l!"Ev(B $BJ]>Z<uBw6(2q$@$1$G$9!#(B $B(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(B $B!!!!!z(B--$B!~!!#22/1_!"#32/1_!"#52/1_$N8D?M<}F~<TH/@8(B $B!z(B--$B!~(B $B!!!!!!!!!!!!!!!z(B--$B!~!!$NM}M3$O%P%V%kJx2u(B $B!z(B--$B!~(B $B!z(!(!(!!&!&!&(!(!(!(!!&!&!&!&(!(!(!!&!&!&(!(!(!!&!&!&(!!=!=!z(B $B!}!H5.J}MM$bDI$$$D$-DI$$H4$/J]>Z>Z7t;v6H!I$O!">&9f!aJ]>Z:_Bp;v(B $B!!6H8\!!Ld!&J]>Z6(2qD9!JE9J^!";vL3=jITMW$N%3%s%S%KE9$N%*!<%J!<$H(B $B!!F1MM!K$O!"!!M=Dj!"4uK>!"L4Ey$r%*!<%P!<$7$?<}F~>Z5r$NM}M3$OC1=c(B $B!!$G$9!#(B $B!!%M%C%H%P%V%k!J<{MW$h$j6!5k<T$,5^A}$7$?!K$H@5H?BP$K!"IT67$N@z$j$G!!(B $B!!;q6b!J@83h!";v6H!"8=>u0];}!"IT7J5$BP:v!K$,M_$7$$?M$,!"%P%V%kJx(B $B!!2u#1#2G/0J>e7QB3$7$FA}2C$7$F$$$k$+$i$G$9!#(B $B!}6d9T$N6/@)E*2s<}!"B_$7=B$j!"@=IJ>&IJ$N%G%U%lDc2A3J6%Ah!&J]>Z(B $B!!?M$N:b;::9$72!$5$(!&J]>Z?M:DL3<T$N<+;&%[!<%`%l%9!&Ey$NF|K\7P(B $B!!:Q$N<:GT!!$K$h$k5>@7<T$HM=Hw73$O_'C+$N#2#3<T$N#1<T$N$_@8$-;D(B $B!!$kNc$+$7$F:#8e!!99$K3HBg798~$H$N>pJs!#(B $B!!$=$N$*Lr$KN)$A$?$$!VJ]>Z>Z7t$r!a?M=u$1J]>Z%5!<%S%9>&IJ!W$H$J$k(B $B!!$+$i$G$9!#(B $B!|$3$A$i$+$i(B $B!!(Bhttp://orient-sky.com/ $B!!L5NA$N;qNA$4@A5a$G$-$^$9!#(B $B!!!!(B |
|
From: Scott M. <sco...@ad...> - 2003-04-28 10:52:37
|
Has anyone been able to get X11 forwarding through Chroot'd OpenSSH working? It doesn't seem to create the .Xauthority file or set the DISPLAY environment variable to localhost:10.0. I have tried another Chrooting project named Jail. It also has a problem in that it tries to create the .Xauthority file in the directory that the real /etc/passwd names as the home directory. I don't know if Chrootssh has the same issue. Thanks, Scott |
|
From: <ma...@89...> - 2003-04-26 12:23:06
|
<HTML> <HEAD> <META NAME="GENERATOR" Content="Microsoft DHTML Editing Control"> <TITLE></TITLE> </HEAD> <BODY> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; mso-vertical-align-alt: auto"> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></B></P><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2> <o:p></O:P></FONT></SPAN> <P></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt; mso-vertical-align-alt: auto"><SPAN lang=EN-US style="FONT-SIZE: 9pt; COLOR: gray; FONT-FAMILY: 굴림"> </SPAN><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><o:p></O:P></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="FONT-SIZE: 16pt; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt">(광고)차안의 담배냄새, 퀴퀴한 냄새...???@<o:p></O:P></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="FONT-SIZE: 16pt; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt"></SPAN></B> </P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-SIZE: 16pt; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt"><SPAN style="FONT-SIZE: 9pt; COLOR: red; FONT-FAMILY: 굴림; mso-bidi-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: KO; mso-bidi-language: AR-SA"><STRONG>안녕하세요 <SPAN lang=EN-US>chr...@li... 님!!!</SPAN></STRONG></SPAN><o:p></O:P></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-SIZE: 16pt; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt">방향제 때문에 머리가 아프시죠<SPAN lang=EN-US>...!<SPAN style="mso-spacerun: yes"> </SPAN>이렇게 하시면 됩니다.</SPAN></SPAN></B><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><o:p></O:P></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-SIZE: 14pt; COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt">모든 냄새 악취제거 전문<SPAN lang=EN-US>......</SPAN></SPAN></B><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><o:p></O:P></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-SIZE: 12pt; COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt">천연원료 제품으로 인체 전연 무해하고 자연 친화적인 제품으로 두통을 유발하지 않습니다<SPAN lang=EN-US>.....</SPAN></SPAN></B><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><o:p></O:P></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>담배냄새<SPAN lang=EN-US>, 음식냄새, 곰팡이냄새, 곰팡이세균, 무좀균, 발냄새, 인체냄세, 된장국냄새, 청국장냄새, 인테리어 내장재 냄새,<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>하수구냄새<SPAN lang=EN-US>, 각종 퀴퀴한 냄새, 승용차안의 냄새, 가축냄새, 가축 분뇨냄새, 화장실냄새, 쓰레기냄새, 쓰레기장 악취,<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>정화조 냄새<SPAN lang=EN-US>, 병원 입원실냄새, 지하실 퀴퀴한 냄새,<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>이 모든 냄새와 악취를 근원적으로 분해 제거하며 각종 세균을 살균처리합니다<SPAN lang=EN-US>....<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="FONT-SIZE: 18pt; COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt">www.89894.com<SPAN style="mso-spacerun: yes"> 와사비 원료 제품으로... </SPAN></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>냄새원을 제거한뒤 자연향을 은은하게 풍기어 줍니다<SPAN lang=EN-US>.....<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>%%%<SPAN style="mso-spacerun: yes"> </SPAN></FONT></SPAN></B><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-SIZE: 16pt; COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'; mso-bidi-font-size: 10.0pt">추사</SPAN></B><FONT size=2><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: red; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><SPAN style="mso-spacerun: yes"> </SPAN>%%%</SPAN></B><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><o:p></O:P></SPAN></B></FONT></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT size=2><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'">제품을 구입하신분에 한해서 <SPAN lang=EN-US> cafe.daum.net/106030 무한동력 카페에 카테고리 회원 등록란을 클릭하고 글을남겨놓으시면 무한동력 개발 완료후</SPAN></SPAN></B></FONT></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT size=2><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><SPAN lang=EN-US>참여의 기회가 주어집니다...</SPAN></SPAN></B><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><o:p></O:P></SPAN></FONT></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><SPAN style="mso-spacerun: yes"> </SPAN>^^**^^<SPAN style="mso-spacerun: yes"> </SPAN>^^**^^<SPAN style="mso-spacerun: yes"> </SPAN>^^**^^<o:p></O:P></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>쇼핑몰<SPAN lang=EN-US><SPAN style="mso-spacerun: yes"> </SPAN>: www.89894.com<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>전<SPAN lang=EN-US><SPAN style="mso-spacerun: yes"> </SPAN>화<SPAN style="mso-spacerun: yes"> </SPAN>: 031-394-0045<SPAN style="mso-spacerun: yes"> </SPAN>hp : 011-281-1434<SPAN style="mso-spacerun: yes"> </SPAN>신<SPAN style="mso-spacerun: yes"> </SPAN>용<SPAN style="mso-spacerun: yes"> </SPAN>철<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>무한 동력<SPAN lang=EN-US> : cafe.daum.net/106030<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>주 소 : 경기도 군초시 당동 853-2 101</FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="COLOR: blue; FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2>감사 합니다<SPAN lang=EN-US>.....<o:p></O:P></SPAN></FONT></SPAN></B></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><B style="mso-bidi-font-weight: normal"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2></FONT></SPAN></B> </P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><FONT color=#808080>"denied"</FONT></FONT></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><FONT color=#808080><SPAN lang=EN-US style="FONT-SIZE: 9pt; COLOR: gray; FONT-FAMILY: 굴림"> $EmilFrom, chr...@li..., http://chrootssh.sourceforge.net, chr...@li...</SPAN><o:p></O:P></FONT></FONT></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US style="FONT-FAMILY: 굴림; mso-hansi-font-family: 'Times New Roman'"><FONT size=2><o:p></O:P></FONT></SPAN></P> <P class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><SPAN lang=EN-US><FONT size=2><o:p></O:P></FONT></SPAN></P> <P> </P> <br><table width="100%"><td bgcolor="#FFFFFF"><hr> <font color="#808080" face="굴림"><span style="FONT-SIZE:9pt">귀하의 이메일주소는 인터넷<a href="http://chrootssh.sourceforge.net">서핑중</a>알게되었으며, 메일주소이외의 어떠한 정보도 가지고 있지 않습니다. 메일수신을 원하지 않을경우 <a href="mailto:ma...@89...?subject=REMOVE&body=본인의 이메일주소 chr...@li...를 리스트에서 삭제해 주세요...">[수신거부]</a>를 눌러주십시요.. 감사 합니다. </span></font><font face="Arial" size="2"><font color="#808000">If you feel that this information is not what you want, please click <a href="mailto:ma...@89...?subject=REMOVE&body=Pls remove my email chr...@li... from your list..">[HERE]</a> requesting to be removed. Thank you, and we apologize for any inconvenience.</font><hr></td></table><br></BODY> </HTML> |
|
From: James D. <jd...@la...> - 2003-04-21 14:44:39
|
I'm very pleased you're crazy about the site. Please check the docs on there and if they don't make sense or it doesn't work, then feel free to write back and we'll see waht we can do. -James SP18 wrote: > Hello, > > Frist, I'm crazy about http://chrootssh.sourceforge.net/ :) > > But, how to make a chroot account on my box ? Is a special > configuration? > > > > -- > SP18. (mailto:SP...@tr...) > FRANCE. > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Chrootssh-users mailing list > Chr...@li... > https://lists.sourceforge.net/lists/listinfo/chrootssh-users > |
|
From: SP18 <SP...@tr...> - 2003-04-19 11:37:27
|
Hello, Frist, I'm crazy about http://chrootssh.sourceforge.net/ :) But, how to make a chroot account on my box ? Is a special configuration? -- SP18. (mailto:SP...@tr...) FRANCE. |
|
From: James D. <jd...@la...> - 2003-04-18 17:29:34
|
This is all answered in the documentation online. Please check there first. -James ps. I dig the count zero email. I like william gibson quite a bit. William Metcalf wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Does anybody have this working on Red Hat 9 and any version of the > patched source preferably 3.6.1? If so what Libraries do I need to > copy to the chroot??? how do I specify the chroot??? If anybody > does have step-by-step instructions it would be greatly appreciated. > > Regards, > > William Metcalf > > -----BEGIN PGP SIGNATURE----- > Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> > > iQA/AwUBPpuLwN3R1q7EaR65EQJfmwCg7kjN5ZPOon0+Yhl+eRcogXIBgb0AoMm7 > XtoKHoB/EVCKfbfW+4e+6LKL > =7O+3 > -----END PGP SIGNATURE----- -- James Dennis Harvard Law School "Not everything that counts can be counted, and not everything that can be counted counts." |
|
From: William M. <cou...@ho...> - 2003-04-15 04:31:42
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Does anybody have this working on Red Hat 9 and any version of the patched source preferably 3.6.1? If so what Libraries do I need to copy to the chroot??? how do I specify the chroot??? If anybody does have step-by-step instructions it would be greatly appreciated. Regards, William Metcalf -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBPpuLwN3R1q7EaR65EQJfmwCg7kjN5ZPOon0+Yhl+eRcogXIBgb0AoMm7 XtoKHoB/EVCKfbfW+4e+6LKL =3D7O+3 -----END PGP SIGNATURE----- |
|
From: James D. <ja...@fi...> - 2003-04-11 14:39:44
|
Hmm.. can't say I know the answer to this one. do_setusercontext NEEDS to be called any time someone is authenticated. I'm planning on taking a closer look later today so hopefully I can find something. There appears to be a few other issues too. -James On Fri, 11 Apr 2003 18:06:21 +0400 "Brusilovsky, Eugene" <Eug...@pr...> wrote: > Guys, > > Did any of you try to chroot ssh on FreeBSD 4.x system? I applied the > patch to openssh 3.6.1 and here is what I've got while compiling: > > (cd openbsd-compat && make) > gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o > sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat > -lutil -lz -lcrypto > gcc -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I. -I. > -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" > -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" > -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" > -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" > -D_PATH_SSH_PIDDIR=\"/var/run\" > -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" > -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H > -c session.c > session.c: In function `do_setusercontext': > session.c:1214: warning: unused variable `new_root' > session.c:1213: warning: unused variable `user_dir' > > I have to say that I was able to "successfully" make and install sshd. > SSH works fine but it never does chroot :(. > I checked the source code and it seems that command execution never > reach the chroot() call. That is why new_root and user_dir variables > claimed to be unused. > Any ideas? > > Eugene Brusilovsky > |
|
From: Brusilovsky, E. <Eug...@pr...> - 2003-04-11 14:07:17
|
Guys, =20 Did any of you try to chroot ssh on FreeBSD 4.x system? I applied the patch to openssh 3.6.1 and here is what I've got while compiling: (cd openbsd-compat && make) gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat -lutil -lz -lcrypto gcc -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I. -I. -DSSHDIR=3D\"/usr/local/etc\" = -D_PATH_SSH_PROGRAM=3D\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=3D\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=3D\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=3D\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=3D\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=3D\"/var/empty\" -DSSH_RAND_HELPER=3D\"/usr/local/libexec/ssh-rand-helper\" = -DHAVE_CONFIG_H -c session.c session.c: In function `do_setusercontext': session.c:1214: warning: unused variable `new_root' session.c:1213: warning: unused variable `user_dir' =20 I have to say that I was able to "successfully" make and install sshd. SSH works fine but it never does chroot :(. I checked the source code and it seems that command execution never reach the chroot() call. That is why new_root and user_dir variables claimed to be unused. Any ideas? =20 Eugene Brusilovsky |
|
From: James D. <jd...@la...> - 2003-04-04 17:54:21
|
I didn't notice that a 3.6.1 came out. The patch is on it's way to sourceforge's site along with a patched tarball. -- James Dennis Harvard Law School "Not everything that counts can be counted, and not everything that can be counted counts." |
|
From: James D. <jd...@la...> - 2003-04-04 15:42:35
|
Ah, cool! -James Serghej Petrov wrote: > Hello, > > Please RedHat users check this documentation : > http://mail.incredimail.com/howto/openssh/ > http://ulf.zeitform.de/sshchroot/ > > After spend time for chrootssh (docs, faq, mailing), i've not been able to make working binaries from chrootssh.sourceforge.net for RedHat 7.3 ;( > But if you patch and re-build rpm - chrooted sshd work fine ;) > > Serghej |
|
From: Serghej P. <sp...@ti...> - 2003-04-04 15:05:51
|
Hello, Please RedHat users check this documentation : http://mail.incredimail.com/howto/openssh/ http://ulf.zeitform.de/sshchroot/ After spend time for chrootssh (docs, faq, mailing), i've not been able = to make working binaries from chrootssh.sourceforge.net for RedHat 7.3 = ;( But if you patch and re-build rpm - chrooted sshd work fine ;) Serghej=20 -----Original Message----- From: Steve Schlaifer [mailto:st...@ki...]=20 Sent: marted=EC 25 marzo 2003 19.18 To: Serghej Petrov Cc: chr...@li... Subject: Re: [Chrootssh-users] Chroot and chrootssh /./ connection = closed On Tue, 25 Mar 2003, Serghej Petrov wrote: > I've download from http://chrootssh.sourceforge.net/ patched version=20 > of OpenSSH (openssh-3.5p1-chroot.tar.gz) compil and install. But if I=20 > chroot user in /etc/passwd ( pippo:x:506:506::/home/pippo/./:/bin/bash = > ) After autentication connection is closed by sshd server... Why?=20 > Without /./ in password file everything is ok. My guess would be that you haven't set up the chroot environment with = all of the binaries and libraries it needs. In particular, there needs = to be a copy of bash in /home/pippo/bin and any shared libraries it = needs in /home/pippo/lib. --Steve "Perhaps God gave man free will so he could choose to stop those who had chosen evil." <James Lileks> |
|
From: James D. <jd...@la...> - 2003-03-31 16:55:54
|
I mean the documentation on http://chrootssh.sf.net. I go through the=20 process of building the chroot cage there. Should be straight-forward,=20 but if not, feel free to email the list again. -James Serghej Petrov wrote: > Yes, I've try to build openssh-3.5p1-chroot option on Redhat 7.3 , > --with-pam option compiled authentication on the server is ok but sshd = close connection with client=20 > Without pam option compiled the user is logget in his/her home director= y and NOT chrooted =20 > sh-2.05$ pwd > /home/pippo/./ >=20 > I've read about chroot man pages and documentation, but not found way = to make work chroot with ssh :( >=20 > Please help. > Thanks > Serghej > =20 >=20 >=20 >=20 >=20 > -----Original Message----- > From: James Dennis [mailto:jd...@la...]=20 > Sent: venerd=EC 28 marzo 2003 17.53 > To: Serghej Petrov; chr...@li... > Subject: Re: [Chrootssh-users] Chroot and chrootssh /./ connection clos= ed >=20 >=20 > Have you built the chrooted environment? It doesn't just magically work= ,=20 > check the documentation for more information. > -James >=20 > Serghej Petrov wrote: >=20 >>Hello >>I've download from http://chrootssh.sourceforge.net/ patched version of >>OpenSSH (openssh-3.5p1-chroot.tar.gz) compil and install. >>But if I chroot user in /etc/passwd ( >>pippo:x:506:506::/home/pippo/./:/bin/bash ) >>After autentication connection is closed by sshd server... Why? Without >>/./ in password file everything is ok. =20 >>Please help. >> >>Best >> >>Serghej >> >> >>------------------------------------------------------- >>This SF.net email is sponsored by: >>The Definitive IT and Networking Event. Be There! >>NetWorld+Interop Las Vegas 2003 -- Register today! >>http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en >>_______________________________________________ >>Chrootssh-users mailing list Chr...@li... >>https://lists.sourceforge.net/lists/listinfo/chrootssh-users >> >=20 >=20 --=20 James Dennis Harvard Law School "Not everything that counts can be counted, and not everything that can be counted counts." |
|
From: Serghej P. <sp...@ti...> - 2003-03-31 15:42:05
|
Yes, I've try to build openssh-3.5p1-chroot option on Redhat 7.3 , --with-pam option compiled authentication on the server is ok but sshd = close connection with client=20 Without pam option compiled the user is logget in his/her home directory = and NOT chrooted =20 sh-2.05$ pwd /home/pippo/./ I've read about chroot man pages and documentation, but not found way = to make work chroot with ssh :( Please help. Thanks Serghej =20 -----Original Message----- From: James Dennis [mailto:jd...@la...]=20 Sent: venerd=EC 28 marzo 2003 17.53 To: Serghej Petrov; chr...@li... Subject: Re: [Chrootssh-users] Chroot and chrootssh /./ connection = closed Have you built the chrooted environment? It doesn't just magically work, = check the documentation for more information. -James Serghej Petrov wrote: > Hello > I've download from http://chrootssh.sourceforge.net/ patched version = of > OpenSSH (openssh-3.5p1-chroot.tar.gz) compil and install. > But if I chroot user in /etc/passwd ( > pippo:x:506:506::/home/pippo/./:/bin/bash ) > After autentication connection is closed by sshd server... Why? = Without > /./ in password file everything is ok. =20 > Please help. >=20 > Best >=20 > Serghej >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: > The Definitive IT and Networking Event. Be There! > NetWorld+Interop Las Vegas 2003 -- Register today! > http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en > _______________________________________________ > Chrootssh-users mailing list Chr...@li... > https://lists.sourceforge.net/lists/listinfo/chrootssh-users >=20 --=20 James Dennis Harvard Law School "Not everything that counts can be counted, and not everything that can be counted counts." |
|
From: James D. <jd...@la...> - 2003-03-28 16:52:58
|
Have you built the chrooted environment? It doesn't just magically work, check the documentation for more information. -James Serghej Petrov wrote: > Hello > I've download from http://chrootssh.sourceforge.net/ patched version of > OpenSSH (openssh-3.5p1-chroot.tar.gz) compil and install. > But if I chroot user in /etc/passwd ( > pippo:x:506:506::/home/pippo/./:/bin/bash ) > After autentication connection is closed by sshd server... Why? Without > /./ in password file everything is ok. > Please help. > > Best > > Serghej > > > ------------------------------------------------------- > This SF.net email is sponsored by: > The Definitive IT and Networking Event. Be There! > NetWorld+Interop Las Vegas 2003 -- Register today! > http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en > _______________________________________________ > Chrootssh-users mailing list > Chr...@li... > https://lists.sourceforge.net/lists/listinfo/chrootssh-users > -- James Dennis Harvard Law School "Not everything that counts can be counted, and not everything that can be counted counts." |
1478 messages has been excluded from this view by a project administrator.
