Openssh chroot
Allikas: Kuutõrvaja
http://www.howtoforge.com/chrooted_ssh_howto_debian_p2
fetch http://chrootssh.sourceforge.net/download/openssh-4.2p1-chroot.tar.gz tar -xf openssh-4.2p1-chroot.tar.gz cd openssh-4.2p1-chroot ./configure make make install
/usr/local/sbin/sshd -t -f /usr/local/etc/sshd_config
#!/bin/sh
mkdir /home/chroot/
mkdir /home/chroot/home/
cd /home/chroot
mkdir etc
mkdir bin
mkdir lib
mkdir usr
mkdir usr/bin
mkdir dev
mknod dev/null c 1 3
mknod dev/zero c 1 5
APPS="/bin/ls /bin/mkdir /bin/mv /bin/pwd /bin/rm /usr/bin/id /usr/bin/ssh"
for prog in $APPS; do
cp $prog ./$prog
# obtain a list of related libraries
ldd $prog > /dev/null
if [ "$?" = 0 ] ; then
LIBS=`ldd $prog | awk '{ print $3 }'`
for l in $LIBS; do
mkdir -p ./`dirname $l` > /dev/null 2>&1
cp $l ./$l
done
fi
done
FreeBSD
/usr/ports/security/openssh-portable
[X] OPENSSH_CHROOT Enable CHROOT support
- mkdir /home/jail
- cd /home/jail
- mkdir bin home lib
- cp /bin/csh /home/jail/bin
- ldd /bin/csh
/bin/csh:
libncurses.so.7 => /lib/libncurses.so.7 (0x280c6000)
libcrypt.so.4 => /lib/libcrypt.so.4 (0x28109000)
libc.so.7 => /lib/libc.so.7 (0x28122000)
- cp /lib/libncurses.so.7 /home/jail/lib
- cp /lib/libcrypt.so.4 /home/jail/lib
- cp /lib/libc.so.7 /home/jail/lib