LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-12-2005, 05:27 AM   #1
ldp
Member
 
Registered: Apr 2004
Location: Belgium Antwerpen
Distribution: slackware - knoppix
Posts: 141

Rep: Reputation: 18
Chroot SSH small howto.


Hello,
On the net, I found the following small howto for a chrooted logon:
http://www.tjw.org/chroot-login-HOWTO/
In general, they do it like this: "login -> sudo(root) -> chroot $HOME su $USER"

I'm pretty sure that this will work but aren't there any serious security concerns here? Can the user in the jail who has become briefly the root not compromise the system? Can't he just change his shell using "SHELL=/bin/bash", export SHELL??
I don't know but I'm a little bit reluctant to give a user, even if it's only briefly and automated a "sudo"....

Anybody has some advice or better tutorial for this?
btw: it's a slack 10 that I'm using.
 
Old 01-12-2005, 05:50 AM   #2
ldp
Member
 
Registered: Apr 2004
Location: Belgium Antwerpen
Distribution: slackware - knoppix
Posts: 141

Original Poster
Rep: Reputation: 18
nevermind, I just "found" unSpawn's super security thread. Currently checking that out now.
bye!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
chroot ssh Manuel-H Slackware 3 09-15-2005 05:33 PM
How to implement chroot in SSH urehman Red Hat 0 10-26-2004 02:41 PM
trouble with chroot ssh slug420 Linux - Security 6 08-10-2004 01:34 PM
ssh for chroot Thorsten Linux - Security 1 08-26-2003 05:46 AM
ssh for chroot Thorsten Linux - Software 0 08-26-2003 03:49 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration