Thread: RE: solaris chroot setups?
Brought to you by:
xystrus
From: Shapiro, D. <dav...@bt...> - 2003-05-23 14:35:16
|
Here is the chroot setup I used on solaris 2.8. etc: total 16 drwxr-xr-x 16 root other 512 May 23 08:35 .. -rw-r--r-- 1 root other 472 May 12 16:35 group -rwxr-xr-x 1 root other 912 May 12 16:34 passwd drwxr-xr-x 2 root sys 512 May 12 16:19 . -rwxr-xr-x 1 root other 3156 May 12 15:09 profile dev: made with mknod command total 4 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root sys 512 May 12 15:54 . crwxr-xr-x 1 root other 13, 12 May 12 15:54 zero crwxr-xr-x 1 root other 21, 5 May 12 15:54 log crwxr-xr-x 1 root other 13, 2 May 12 15:54 null tmp: total 4 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root sys 512 May 12 15:43 . -rwxr-xr-x 1 root other 0 May 12 14:24 rssh.log usr: total 18 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root other 512 May 12 15:43 bin drwxr-xr-x 9 root sys 512 May 12 15:10 . drwxr-xr-x 5 root other 512 May 12 14:44 local drwxr-xr-x 3 root other 512 May 12 14:33 ccs drwxr-xr-x 2 root other 512 May 12 12:49 sbin drwxr-xr-x 3 root other 512 May 12 12:37 share drwxr-xr-x 3 root other 512 May 12 12:25 lib drwxr-xr-x 3 root other 512 May 9 18:09 platform usr/bin: total 68 drwxr-xr-x 2 root other 512 May 12 15:43 . -rwxr-xr-x 1 root other 7696 May 12 15:43 id -rwxr-xr-x 1 root other 18120 May 12 15:10 ls -rwxr-xr-x 1 root other 5380 May 12 15:10 env drwxr-xr-x 9 root sys 512 May 12 15:10 .. usr/local: total 10 drwxr-xr-x 2 root other 512 May 12 15:19 bin drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 5 root other 512 May 12 14:44 . drwxr-xr-x 2 root other 512 May 12 14:44 lib drwxr-xr-x 2 root other 512 May 9 18:14 libexec usr/local/bin: total 134 -rwxr-xr-x 1 root other 10264 May 12 15:50 rssh_chroot_helper drwxr-xr-x 2 root other 512 May 12 15:19 . drwxr-xr-x 5 root other 512 May 12 14:44 .. -rwxr-xr-x 1 root other 34332 May 12 10:11 scp -rwxr-xr-x 1 root other 19800 May 9 18:31 rssh usr/local/lib: total 4 drwxr-xr-x 2 root other 512 May 12 14:44 . drwxr-xr-x 5 root other 512 May 12 14:44 .. usr/local/libexec: total 168 drwxr-xr-x 5 root other 512 May 12 14:44 .. -rwxr-xr-x 1 root other 83108 May 12 10:12 sftp-server drwxr-xr-x 2 root other 512 May 9 18:14 . usr/ccs: total 6 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 2 root other 512 May 12 14:33 bin drwxr-xr-x 3 root other 512 May 12 14:33 . usr/ccs/bin: total 68 drwxr-xr-x 2 root other 512 May 12 14:33 . -rwxr-xr-x 1 root other 32536 May 12 14:33 m4 drwxr-xr-x 3 root other 512 May 12 14:33 .. usr/sbin: total 152 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 2 root other 512 May 12 12:49 . -rwxr-xr-x 1 root other 75448 May 12 12:49 syslogd usr/share: total 6 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 3 root other 512 May 12 12:37 . drwxr-xr-x 3 root other 512 May 12 12:37 lib usr/share/lib: total 6 drwxr-xr-x 3 root other 512 May 12 12:37 . drwxr-xr-x 3 root other 512 May 12 12:37 .. drwxr-xr-x 3 root other 512 May 12 12:37 zoneinfo usr/share/lib/zoneinfo: total 6 drwxr-xr-x 2 root other 512 May 12 12:38 US drwxr-xr-x 3 root other 512 May 12 12:37 . drwxr-xr-x 3 root other 512 May 12 12:37 .. usr/share/lib/zoneinfo/US: total 8 drwxr-xr-x 2 root other 512 May 12 12:38 . -rwxr-xr-x 1 root other 1250 May 12 12:38 Eastern drwxr-xr-x 3 root other 512 May 12 12:37 .. usr/lib: total 5222 drwxr-xr-x 9 root sys 512 May 12 15:10 .. -rwxr-xr-x 1 root other 19876 May 12 12:27 libmp.so.2 drwxr-xr-x 2 root other 512 May 12 12:25 security drwxr-xr-x 3 root other 512 May 12 12:25 . -rwxr-xr-x 1 root other 21538 May 12 12:25 nss_winbind.so.1 -rwxr-xr-x 1 root other 27884 May 12 12:24 nss_files.so.1 -rwxr-xr-x 1 root other 41500 May 12 12:23 libgen.so.1 -rwxr-xr-x 1 root other 1126044 May 12 12:23 libc.so.1 -rwxr-xr-x 1 root other 33732 May 12 12:23 libpam.so.1 -rwxr-xr-x 1 root other 4908 May 12 12:23 libdl.so.1 -rwxr-xr-x 1 root other 838536 May 12 12:23 libnsl.so.1 -rwxr-xr-x 1 root other 56988 May 12 12:23 libsocket.so.1 -rwxr-xr-x 1 root other 118296 May 12 12:22 libbsm.so.1 -rwxr-xr-x 1 root other 19188 May 12 12:22 libcmd.so.1 -rwxr-xr-x 1 root other 15084 May 12 12:22 libcrypt_i.so.1 -rwxr-xr-x 1 root other 40012 May 12 10:14 libaio.so.1 -rwxr-xr-x 1 root other 41572 May 12 10:13 librt.so.1 -rwxr-xr-x 1 root other 211268 May 9 18:35 ld.so.1 usr/lib/security: total 308 drwxr-xr-x 2 root other 512 May 12 12:25 . -rwxr-xr-x 1 root other 140980 May 12 12:25 pam_unix.so.1 drwxr-xr-x 3 root other 512 May 12 12:25 .. usr/platform: total 6 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 3 root other 512 May 9 18:09 . drwxr-xr-x 3 root other 512 May 9 18:09 SUNW,Ultra-4 usr/platform/SUNW,Ultra-4: total 6 drwxr-xr-x 2 root other 512 May 9 18:10 lib drwxr-xr-x 3 root other 512 May 9 18:09 . drwxr-xr-x 3 root other 512 May 9 18:09 .. usr/platform/SUNW,Ultra-4/lib: total 38 drwxr-xr-x 2 root other 512 May 9 18:10 . -rwxr-xr-x 1 root other 17256 May 9 18:10 libc_psr.so.1 drwxr-xr-x 3 root other 512 May 9 18:09 .. bin: total 620 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root bin 512 May 12 15:08 . -rwxr-xr-x 1 root other 18120 May 12 15:08 ls -rwxr-xr-x 1 root other 193804 May 12 15:08 ksh -rwxr-xr-x 1 root other 91836 May 12 15:07 sh var: total 14 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root other 512 May 12 12:47 adm drwxr-xr-x 2 root other 512 May 12 12:31 ld drwxr-xr-x 7 root sys 512 May 12 12:30 . drwxr-xr-x 3 root other 512 May 12 10:34 run drwxr-xr-x 2 root other 512 May 12 10:29 log drwxr-xr-x 2 root other 512 May 9 18:04 empty var/adm: total 4 drwxr-xr-x 2 root other 512 May 12 12:47 . -rwxr-xr-x 1 root other 0 May 12 12:47 wtmp -rwxr-xr-x 1 root other 0 May 12 12:47 wtmpx drwxr-xr-x 7 root sys 512 May 12 12:30 .. -rwxr-xr-x 1 root other 0 May 12 10:29 messages var/ld: total 64 drwxr-xr-x 2 root other 512 May 12 12:31 . -rwxr-xr-x 1 root other 30336 May 12 12:31 ld.config drwxr-xr-x 7 root sys 512 May 12 12:30 .. var/run: total 6 drwxr-xr-x 7 root sys 512 May 12 12:30 .. drwxr-xr-x 3 root other 512 May 12 10:34 . drwxr-xr-x 2 root other 512 May 12 10:34 log var/run/log: total 4 drwxr-xr-x 2 root other 512 May 12 10:34 . drwxr-xr-x 3 root other 512 May 12 10:34 .. var/log: total 4 drwxr-xr-x 7 root sys 512 May 12 12:30 .. drwxr-xr-x 2 root other 512 May 12 10:29 . -rwxr-xr-x 1 root other 0 May 12 10:29 sudo -rwxr-xr-x 1 root other 0 May 12 10:29 authlog var/empty: total 4 drwxr-xr-x 7 root sys 512 May 12 12:30 .. drwxr-xr-x 2 root other 512 May 9 18:04 . -----Original Message----- From: Derek Martin [mailto:co...@pi...] Sent: Friday, May 23, 2003 6:53 AM To: 'rss...@li...' Subject: Re: solaris chroot setups? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, May 12, 2003 at 12:10:17PM -0400, Shapiro, David wrote: > The user of interest line looks something like the following: > cmg:x:2099:14:CMG:/u02/ftp/cmg:/usr/local/bin/rssh > > I am not sure what to do about logging and chroot for solaris or what I need > for the dynamic linker (is this needed for solaris?) Yeah, the linker is needed for solaris. I can't tell you what you need for it, since I don't have a Solaris machine. If you feel like sending me one... =8^) > If I do not use chrootpath, the login works fine and it denies ssh type > logins. If I enable th chrootpath option in /usr/local/etc/rssh.conf, it > drops the connection immediately. I am not sure if this is a fair test, but > running rssh_chroot_helper alone with no options causes a segmentation > fault. Hmmm. It shouldn't segfault. That's bad. I'll need to look into why. But at the moment, I'm vacationing in Asia, so it won't happen soon. Hopefully it's a linker issue, not a bug... - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+zf18djdlQoHP510RAoTvAJ9g6CCe8tY0pfFhE1xt1U1UPoHrogCgmYyh KSBU6Vb99SjuczcuzYb/d/8= =wAKG -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ rssh-discuss mailing list rss...@li... https://lists.sourceforge.net/lists/listinfo/rssh-discuss |