openssh chroot

[Ales Horak]

Dan Ohnesorg <dan na feld.cvut.cz> pise:
>On Tue, 29 May 2001, Ales Horak wrote:
>
>>     Connection to stroj closed by remote host.
>>     Connection to stroj closed.
>
>Pocitam, ze budete mit potize s binarkami a sdilenymi knihovnami. Shhd
>zrejme nedokaze spustit login shell.
>
myslim, ze tak jednoduche to nebude - zkusil jsem strace na ssh stroj se
zapnutym a vypnutym pam_chroot a hlavni rozdil je v:

bez chrootu:

    ...
    socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4
    ...
    read(4, "\0\0\0<\26395(R1\321Aw\v\6f\336\246\330\333
	\201Z\31\223"..., 8192) = 68
    select(5, [0 4], [1], NULL, NULL)        = 1 (out [1])
    write(1, "Last login: Wed May 30 12:43:03 "..., 51) = 51

a s chrootem:

    ...
    socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4
    ...
    read(4, "", 8192) = 0
    rt_sigaction(SIGWINCH, {SIG_DFL}, {0x80522b0, [WINCH],
	SA_RESTART|0x4000000}, 8) = 0
    write(2, "Connection to stroj closed by r"..., 75) = 75

zda se, ze tim chrootem ztrati pristup k nejakymu socketu, ale jak tohle
obejit, to opravdu nevim :-(


-- 
Ales Horak
Fakulta informatiky
Masarykova Univerzita Brno