Re: chroot+su idea

2002-02-15 Thread Julian Elischer
check out 'jail' start the daemon within the startup script of the jail. On Fri, 15 Feb 2002, Walter Hop wrote: > Hi all, > > just like many people, I want to run my "dangerous" daemons as a > non-root user in a chroot environment. Now, I would usually use the > ``su'', or ``chroot'' tools f

Re: chroot+su idea

2002-02-15 Thread Crist J. Clark
Also have a look at jail(8). -- Crist J. Clark | [EMAIL PROTECTED] | [EMAIL PROTECTED] http://people.freebsd.org/~cjc/| [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in th

Re: chroot+su idea

2002-02-15 Thread Terry Lambert
Walter Hop wrote: > Is there a tool available that combines chroot and su? If not, a > chroot capability would be an interesting feature to add to the > FreeBSD ``su'' command in my opinion, e.g. > > % su -l ircd -r /usr/local/ircd -c 'bin/ircd' > > Any ideas or suggestions would be welcomed. If

Re[2]: chroot+su idea

2002-02-15 Thread Walter Hop
[in reply to [EMAIL PROTECTED], 15-02-2002] > cd /usr/ports > less security/chrootuid/pkg-comment > > A simple wrapper that combines chroot(8) and su(1) into one program Great, how could I have overlooked that one? Thanks!! :) walter -- Walter Hop <[EMAIL PROTECTED]> | +31 6 24290808 | PGP

Re: chroot+su idea

2002-02-15 Thread David Malone
On Fri, Feb 15, 2002 at 02:02:49PM +0100, Walter Hop wrote: > 2) chroot first, then su: undesired, as I would have to move a suid >root copy of the "su" tool into the chroot; also unpractical as I'd >have to duplicate a lot of files into the chroot to satisfy su. Have you tried using a no

Re: chroot+su idea

2002-02-15 Thread Olivier Cortes
cd /usr/ports less security/chrootuid/pkg-comment A simple wrapper that combines chroot(8) and su(1) into one program gook luck, olivier On Fri, Feb 15, 2002 at 02:02:49PM +0100, Walter Hop wrote: > Hi all, > > just like many people, I want to run my "dangerous" daemons as a > non-root

chroot+su idea

2002-02-15 Thread Walter Hop
Hi all, just like many people, I want to run my "dangerous" daemons as a non-root user in a chroot environment. Now, I would usually use the ``su'', or ``chroot'' tools from the FreeBSD toolset in the creation of an rc.d script, but the question that puzzles me is how to combine these two measure