chroot - shell

[Petr Cahyna]

Josef Hrabec wrote:
> Chtel bych po prihlaseni uzivatele spustit chroot-nuty shell. Potiz je v
> tom, ze chroot muzu udelat pouze jako root. Kdyz se prihlasim jako uzivatel,
> chroot vypise "Operation not permitted". Nevite prosim nekdo, jak pri tom
> prihlaseni spustit chroot s uid 0 a pak hned dal prislusny shell s uid
> daneho uzivatele?
> Dekuji Pepa.
> 
> 

/etc/security/chroot.conf:
uzivatel      /var/chroot

/etc/pam.d/system-auth:
...
...
session    required     /lib/security/pam_chroot.so

pochopitelne to chce mit vse potrebne ve /var/chroot
ja tam mam treba veci na chrootovane sshcko pro lidi,
takze by se dalo lecos vypustit. Ale ten ./etc tam musi
byt vc. passwd, kde ale staci jenom zaznam s dotycnym
userem (a mozna jeste root kvuli uid u souboru).

cd /var/chroot

[root na komp chroot]# ls -R
.:
bin/  etc/  home/  lib/  usr/

./bin:
bash*  cp*  ls*  mkdir*  mv*  rm*  rmdir*

./etc:
pam.d/  passwd

./etc/pam.d:
system-auth

./home:
uzivatel/

./lib:
ld-2.2.4.so*      libnsl.so.1@             libtermcap.so.2@
ld-linux.so.2@    libnss_compat-2.2.4.so*  libtermcap.so.2.0.8*
libc-2.2.4.so*    libnss_compat.so.2@      libutil-2.2.4.so*
libc.so.6@        libnss_files-2.2.4.so*   libutil.so.1@
libdl-2.2.4.so*   libnss_files.so.2@       libz.so.1@
libdl.so.2@       libpam.so.0@             libz.so.1.1.3*
libnsl-2.2.4.so*  libpam.so.0.75*

./usr:
bin/  lib/

./usr/bin:
scp*

./usr/lib:
libcrypto.so.0@  libcrypto.so.0.9.6*


					caha
-- 
========================================= | Petr Cahyna,   ICZ a.s.
=====  |**  ___  ____     =============== | V Olsinach 75,Prague 10
====   |*  ||      //    ================ | 106 00,  Czech Republic
===    ||  ||     //    ================= | tel +420(2) 81 00 22 22
==     ||  ||__  //__  ================== | fax +420(2) 81 00 22 44
========================================= | e-mail        caha na i.cz