Re: chroot, su and sudo

[Lars Ellenberg <l.g.e@web.de>]

On Mon, Jun 16, 2003 at 10:22:49AM +0200, Mario Ohnewald wrote:
> I want to chroot a application/gameserver.

I played with pam_chroot recently...  unfortunately I found
not much documentation about its intended usage.  whether it
realy suits my needs, I don't know yet.

I'd like to read your comments on this.

you'd need something like user game group game,
put into /etc/security/chroot.conf
	game	/chroot/game
and into each pam service configuration which should use
this, e.g. /etc/pam.d/su
	account	optional pam_chroot.so debug
(whether optional is the right choice I don't know)
restrict access to the user with pam_access.

	Lars