LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   FYI: general guide to chrooting (https://www.linuxquestions.org/questions/linux-security-4/fyi-general-guide-to-chrooting-66113/)

markus1982 06-17-2003 05:16 AM

FYI: general guide to chrooting
 
Chrooting something is - depending on the process you want to chroot - a basic up to advanced road. The steps require to chroot something involve:[list=1][*]create a seperate directory tree (empty)[*]copy the binary and the required libraries (you've used ldd to find those out) in the appropiate directory.[*]run the process non-chrooted and check the files it accesses (data files, devices, etc). use lsof and strace as your tools.[*]create the neccesary devices, data files[*]adjust configuration to reflect the chroot[*]attempt to run the process chrooted[*]put as strict as possible permissions on the chroot[*]modify startup scripts[*]test if all the required functionality of the proccess still works.[*]use aide to check the chroot once a day[/list=1]This is a pretty general and not really explained way. I want your comments on that basic part. I will advance this guide with more explanaitions as time passes by.

Later I will provide a example - MySQL 4.0.13 which is fairly easy to chroot IMHO!

george441 06-20-2003 06:11 PM

Why dont you write a whole article with your best practice on chrooted enviroments for processes and user accounts.

markus1982 06-21-2003 01:58 AM

Well I'm waiting for comments on this base part before continuing writing.


All times are GMT -5. The time now is 04:50 AM.