Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Andres Salomon
argh, this sounds like the sort of thing that would've been useful when i set up rsync on our company backup machine (as opposed to writing a small shell that chrooted and ran rsync). it doesn't appear to be in debian unstable; apt-cache shows no third party module for it, and it's most definitely

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Tim Haynes
Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> writes: > > Yes. Somehow, if you're going to run something, it needs to be in the > > jail. Various alternatives to consider for various reasons : busybox, > > rbash, sash. > > What would be nice would be a union-mount, so you could graft a "real"

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Ethan Benson
On Fri, Oct 26, 2001 at 04:35:14PM +0100, Tim Haynes wrote: > Rishi L Khan <[EMAIL PROTECTED]> writes: > > > I think the only way to accomplish a chroot IS to include all the files > > in the jail that the user needs. > [snip] > > Yes. Somehow, if you're going to run something, it needs to be in

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Javier Fernández-Sanguino Peña
I would be interested only in the chroot patch. Is there any reason you have not contributed it to openssh? Do you want me to do it? Best regards Javi On Fri, Oct 26, 2001 at 05:24:13PM +0300, Ivan Dimitrov wrote: > recently i've worked on a small patch for openssh that

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Sunny Dubey
On Friday 26 October 2001 09:14 am, Javier Fernández-Sanguino Peña wrote: > I have been asked for this and I was trying to figure out how to do it > (would document it later on in the Securing-Debian-Manual). So please, > excuse me if you feel this is off-topic. > > The problem is, how can an admin

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Javier Fernández-Sanguino Peña
On Fri, Oct 26, 2001 at 04:35:14PM +0100, Tim Haynes wrote: > Rishi L Khan <[EMAIL PROTECTED]> writes: > > > I think the only way to accomplish a chroot IS to include all the files > > in the jail that the user needs. > [snip] > > Yes. Somehow, if you're going to run something, it needs to be in

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Javier Fernández-Sanguino Peña
On Fri, Oct 26, 2001 at 05:25:28PM +0200, Christian Kurz wrote: > That's a wrong assumption. At least RedHat contains a pam_chroot.so > module which can be used in connection with the latest ssh to limit a > user into a chroot. I'm just wondering if that module is packaged > already for debian or n

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Andres Salomon
argh, this sounds like the sort of thing that would've been useful when i set up rsync on our company backup machine (as opposed to writing a small shell that chrooted and ran rsync). it doesn't appear to be in debian unstable; apt-cache shows no third party module for it, and it's most definitel

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Tim Haynes
Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> writes: > > Yes. Somehow, if you're going to run something, it needs to be in the > > jail. Various alternatives to consider for various reasons : busybox, > > rbash, sash. > > What would be nice would be a union-mount, so you could graft a "real

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Ethan Benson
On Fri, Oct 26, 2001 at 04:35:14PM +0100, Tim Haynes wrote: > Rishi L Khan <[EMAIL PROTECTED]> writes: > > > I think the only way to accomplish a chroot IS to include all the files > > in the jail that the user needs. > [snip] > > Yes. Somehow, if you're going to run something, it needs to be in

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Javier Fernández-Sanguino Peña
I would be interested only in the chroot patch. Is there any reason you have not contributed it to openssh? Do you want me to do it? Best regards Javi On Fri, Oct 26, 2001 at 05:24:13PM +0300, Ivan Dimitrov wrote: > recently i've worked on a small patch for openssh that

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Sunny Dubey
On Friday 26 October 2001 09:14 am, Javier Fernández-Sanguino Peña wrote: > I have been asked for this and I was trying to figure out how to do it > (would document it later on in the Securing-Debian-Manual). So please, > excuse me if you feel this is off-topic. > > The problem is, how can an admi

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-27 Thread Javier Fernández-Sanguino Peña
On Fri, Oct 26, 2001 at 05:25:28PM +0200, Christian Kurz wrote: > That's a wrong assumption. At least RedHat contains a pam_chroot.so > module which can be used in connection with the latest ssh to limit a > user into a chroot. I'm just wondering if that module is packaged > already for debian or