Erinevus lehekülje "Openssh chroot" redaktsioonide vahel

Allikas: Kuutõrvaja
47. rida: 47. rida:
  
 
  [X] OPENSSH_CHROOT  Enable CHROOT support
 
  [X] OPENSSH_CHROOT  Enable CHROOT support
 +
 +
 +
# mkdir /home/jail
 +
# cd /home/jail
 +
# mkdir bin home lib
 +
# cp /bin/csh /home/jail/bin
 +
#
 +
#
 +
# ldd /bin/csh
 +
/bin/csh:
 +
        libncurses.so.7 => /lib/libncurses.so.7 (0x280c6000)
 +
        libcrypt.so.4 => /lib/libcrypt.so.4 (0x28109000)
 +
        libc.so.7 => /lib/libc.so.7 (0x28122000)
 +
#
 +
# cp /lib/libncurses.so.7 /home/jail/lib
 +
# cp /lib/libcrypt.so.4 /home/jail/lib
 +
# cp /lib/libc.so.7 /home/jail/lib

Redaktsioon: 27. veebruar 2008, kell 16:08

http://www.howtoforge.com/chrooted_ssh_howto_debian_p2

fetch http://chrootssh.sourceforge.net/download/openssh-4.2p1-chroot.tar.gz
tar -xf openssh-4.2p1-chroot.tar.gz
cd openssh-4.2p1-chroot
./configure
make
make install


/usr/local/sbin/sshd -t -f /usr/local/etc/sshd_config


#!/bin/sh
mkdir /home/chroot/
mkdir /home/chroot/home/
cd /home/chroot
mkdir etc
mkdir bin
mkdir lib
mkdir usr
mkdir usr/bin
mkdir dev
mknod dev/null c 1 3
mknod dev/zero c 1 5

APPS="/bin/ls /bin/mkdir /bin/mv /bin/pwd /bin/rm /usr/bin/id /usr/bin/ssh"
for prog in $APPS;  do
        cp $prog ./$prog

        # obtain a list of related libraries
        ldd $prog > /dev/null
        if [ "$?" = 0 ] ; then
                LIBS=`ldd $prog | awk '{ print $3 }'`
                for l in $LIBS; do
                        mkdir -p ./`dirname $l` > /dev/null 2>&1
                        cp $l ./$l
                done
        fi
done


FreeBSD

/usr/ports/security/openssh-portable

[X] OPENSSH_CHROOT  Enable CHROOT support


  1. mkdir /home/jail
  2. cd /home/jail
  3. mkdir bin home lib
  4. cp /bin/csh /home/jail/bin
  5. ldd /bin/csh

/bin/csh:

       libncurses.so.7 => /lib/libncurses.so.7 (0x280c6000)
       libcrypt.so.4 => /lib/libcrypt.so.4 (0x28109000)
       libc.so.7 => /lib/libc.so.7 (0x28122000)
  1. cp /lib/libncurses.so.7 /home/jail/lib
  2. cp /lib/libcrypt.so.4 /home/jail/lib
  3. cp /lib/libc.so.7 /home/jail/lib