Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

Re: Chroot User Environment

Subject: Re: Chroot User Environment
Date: Wed, 22 Dec 2004 10:28:54 -0600
"David E. Meier" <dev@eth0.ch> wrote on 12/21/2004 12:05:27 PM:

-) The numeric uid's do not get mapped to their login names, but gid's
do:
  $ pwd
  /
  $ ls -al
  total 96
  drwxr-xr-x    8 0        wheel         512 Dec 21 17:41 .
  drwxr-xr-x    8 0        wheel         512 Dec 21 17:41 ..
  dr-x--x--x    2 0        wheel         512 Dec 21 16:53 bin
  drwxr-xr-x    2 0        wheel         512 Dec 21 17:42 dev
  dr-xr-xr-x    2 0        wheel         512 Dec 21 16:54 etc
  drwxr-xr-x    4 1003     mygroup       512 Dec 21 16:47 home
  dr-x--x--x    2 0        wheel         512 Dec 21 16:47 lib
  dr-x--x--x    2 0        wheel         512 Dec 21 16:47 libexec

Does your system have something like an nsswitch.conf where "passwd: files"
or similar would need to be specified?  I don't use FreeBSD and don't know
if it's an nsswitch.conf type system, but if not then it probably has some
similar configuration file.

-) I do get funny characters printed when typing a backspce, hitting
delete or entering CTRL-D to exit the shell.

Psuedo-terminal settings.  Maybe /etc/profile (or similar) has some
terminal behavior commands (like stty) that didn't get copied into your
chroot area.

I assume both observations are connected to each other.

I don't think so.  Unless you mean they're both connected by missing
configuration files for their respective areas.

What am I missing
here to build a minimal but fully functional environment? Any comments
are
greatly appreciated. Dave.

Just build it one piece at a time until it works for what you need it to
do, and then document what you included an why it was included (for next
time).  Read the man pages of things that don't work yet to figure out what
configuration files and other binaries they need.  Use ldd to find
libraries your binaries use, and learn about how those libraries work and
if they too have configuration files that you need to copy over (like
nsswitch.conf).  Then you'll have the perfect chroot jail for your
application.

There's probably no magic bullet answer to cover every situation.

--
Michael H. Buselli

<Prev in Thread] Current Thread [Next in Thread>