[Chrootssh-users] Re: Chrootssh on FreeBSD

[James D. <ja...@fi...>]

Hmm.. can't say I know the answer to this one. do_setusercontext NEEDS to be called any time someone is authenticated. I'm planning on taking a closer look later today so hopefully I can find something. There appears to be a few other issues too.
-James

On Fri, 11 Apr 2003 18:06:21 +0400
"Brusilovsky, Eugene" <Eug...@pr...> wrote:

> Guys,
>  
> Did any of you try to chroot ssh on FreeBSD 4.x system? I applied the
> patch to openssh 3.6.1 and here is what I've got while compiling:
> 
> (cd openbsd-compat && make)
> gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o  sshconnect.o
> sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat
> -lutil -lz -lcrypto
> gcc -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I. -I.
> -DSSHDIR=\"/usr/local/etc\"  -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
> -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
> -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
> -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
> -D_PATH_SSH_PIDDIR=\"/var/run\"
> -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
> -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H
> -c session.c
> session.c: In function `do_setusercontext':
> session.c:1214: warning: unused variable `new_root'
> session.c:1213: warning: unused variable `user_dir'
>  
> I have to say that I was able to "successfully" make and install sshd.
> SSH works fine but it never does chroot :(.
> I checked the source code and it seems that command execution never
> reach the chroot() call. That is why new_root and user_dir variables
> claimed to be unused.
> Any ideas?
>  
> Eugene Brusilovsky
>