LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-27-2006, 01:15 AM   #1
shipon_97
Member
 
Registered: Oct 2005
Location: Bangladesh
Posts: 484

Rep: Reputation: 30
Question About "chroot"


Friends ,

I have a question about "chroot" . For DNS configuration we used the location "/var/named" but In the Redhat Enterprise 4 Edition we use the location : "/var/named/chroot/var/named " . Now I don't understand why this "chroot" is used ? And what is the benefits of using it ?

Waiting for ur reply . Thx........
 
Old 08-27-2006, 04:33 AM   #2
uselpa
Senior Member
 
Registered: Oct 2004
Location: Luxemburg
Distribution: Slackware, OS X
Posts: 1,507

Rep: Reputation: 46
I have heard of people actually using Google to find information. Maybe you'll try that too? My first hit was this which is a good start.
 
Old 08-27-2006, 04:35 AM   #3
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
Chrooting is all about running in a chroot jail, or in other words, a small cpy of the system that is all the process can access.

In the case of the Bind configuration you mention, when Bind is run in chroot mode, /var/named/chroot/var/named looks to the process to be /var/named. Hence if someone exploits some DNS vulnerability, all they can mess with is in this chrooted /var/named, and they can't (supposedly) access anything in your genuine / directory.

I hope this makes some sense.

On the downside, applications that require acces to, say, /etc/passwd will need a chrooted copy of this filee maintained, and often /bin files as well. All this means that there is more to maintain on most systems that run chrooted.
 
Old 08-27-2006, 10:05 AM   #4
mihalisla
Member
 
Registered: Jun 2006
Location: greece
Distribution: ubuntu 6.06 amd64
Posts: 132

Rep: Reputation: 15
if u like to know more go to security thread and find security references...from unspawn (metr of security) it has sections for chrooting from the begining...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
chroot "Permission denied" jollyjoice Linux - General 10 08-09-2013 08:50 PM
chroot to md0 for "rescue" from live CD??? f1d094 Ubuntu 0 06-13-2005 08:38 AM
serving website from inside chroot "Permissions" jeffpoulsen Linux - Security 1 07-01-2004 02:55 PM
Problem with "Jail Chroot Project 1.9" Agento- Linux - General 2 01-19-2003 08:52 AM
chroot() - not able to "create" a jail --TOL-- Linux - Security 7 05-23-2002 12:29 PM


All times are GMT -5. The time now is 06:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration