Openssh chroot
Allikas: Kuutõrvaja
http://www.howtoforge.com/chrooted_ssh_howto_debian_p2
fetch http://chrootssh.sourceforge.net/download/openssh-4.2p1-chroot.tar.gz tar -xf openssh-4.2p1-chroot.tar.gz cd openssh-4.2p1-chroot ./configure make make install
/usr/local/sbin/sshd -t -f /usr/local/etc/sshd_config
#!/bin/sh mkdir /home/chroot/ mkdir /home/chroot/home/ cd /home/chroot mkdir etc mkdir bin mkdir lib mkdir usr mkdir usr/bin mkdir dev mknod dev/null c 1 3 mknod dev/zero c 1 5 APPS="/bin/ls /bin/mkdir /bin/mv /bin/pwd /bin/rm /usr/bin/id /usr/bin/ssh" for prog in $APPS; do cp $prog ./$prog # obtain a list of related libraries ldd $prog > /dev/null if [ "$?" = 0 ] ; then LIBS=`ldd $prog | awk '{ print $3 }'` for l in $LIBS; do mkdir -p ./`dirname $l` > /dev/null 2>&1 cp $l ./$l done fi done
FreeBSD
/usr/ports/security/openssh-portable
[X] OPENSSH_CHROOT Enable CHROOT support
- mkdir /home/jail
- cd /home/jail
- mkdir bin home lib
- mkidir home/kasutaja
- cp /bin/csh /home/jail/bin
- ldd /bin/csh
/bin/csh:
libncurses.so.7 => /lib/libncurses.so.7 (0x280c6000) libcrypt.so.4 => /lib/libcrypt.so.4 (0x28109000) libc.so.7 => /lib/libc.so.7 (0x28122000)
- cp /lib/libncurses.so.7 /home/jail/lib
- cp /lib/libcrypt.so.4 /home/jail/lib
- cp /lib/libc.so.7 /home/jail/lib
- mkdir libexec
- cp /libexec/ld-elf.so.1 /usr/home/jail/libexec/