Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Chroot User Environment |
|---|---|
| Date: | Wed, 22 Dec 2004 10:28:54 -0600 |
"David E. Meier" <dev@eth0.ch> wrote on 12/21/2004 12:05:27 PM:
-) The numeric uid's do not get mapped to their login names, but gid's
do:
$ pwd / $ ls -al total 96 drwxr-xr-x 8 0 wheel 512 Dec 21 17:41 . drwxr-xr-x 8 0 wheel 512 Dec 21 17:41 .. dr-x--x--x 2 0 wheel 512 Dec 21 16:53 bin drwxr-xr-x 2 0 wheel 512 Dec 21 17:42 dev dr-xr-xr-x 2 0 wheel 512 Dec 21 16:54 etc drwxr-xr-x 4 1003 mygroup 512 Dec 21 16:47 home dr-x--x--x 2 0 wheel 512 Dec 21 16:47 lib dr-x--x--x 2 0 wheel 512 Dec 21 16:47 libexec
Does your system have something like an nsswitch.conf where "passwd: files" or similar would need to be specified? I don't use FreeBSD and don't know if it's an nsswitch.conf type system, but if not then it probably has some similar configuration file.
-) I do get funny characters printed when typing a backspce, hitting delete or entering CTRL-D to exit the shell.
Psuedo-terminal settings. Maybe /etc/profile (or similar) has some terminal behavior commands (like stty) that didn't get copied into your chroot area.
I assume both observations are connected to each other.
I don't think so. Unless you mean they're both connected by missing configuration files for their respective areas.
What am I missing here to build a minimal but fully functional environment? Any comments
are
greatly appreciated. Dave.
Just build it one piece at a time until it works for what you need it to do, and then document what you included an why it was included (for next time). Read the man pages of things that don't work yet to figure out what configuration files and other binaries they need. Use ldd to find libraries your binaries use, and learn about how those libraries work and if they too have configuration files that you need to copy over (like nsswitch.conf). Then you'll have the perfect chroot jail for your application. There's probably no magic bullet answer to cover every situation. -- Michael H. Buselli
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Auth Keys with 3.9p1 on Solaris with LDAP not working, Covington, Jimmy D. (NGIT) |
|---|---|
| Next by Date: | scp "connection" error, Hari S |
| Previous by Thread: | Chroot User Environment, David E. Meier |
| Next by Thread: | Auth Keys with 3.9p1 on Solaris with LDAP not working, Covington, Jimmy D. (NGIT) |
| Indexes: | [Date] [Thread] [Top] [All Lists] |