[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chroot, su and sudo



Why not just use the start-stop-daemon prog that comes with debian?  
Using the --chuid and --chroot flags?  I've used those to start MOHAA
servers with no issues?  Anyone else know if this way is actually
secure? 

thanks,
steve

On Mon, 2003-06-16 at 03:22, Mario Ohnewald wrote:
> Hello!
> I want to chroot a application/gameserver.
> 
> What is the better/securest way?
> 1.) "Chroot /path" and then do a "su -s /bin/sh user -c  start.sh"
> or
> 2.) "su -s /bin/sh user" and then do the "chroot /path" as normal user and
> execute the "start.sh" in the chroot?
> 
> Solution 2 does not need a root shell at all, why i think it is a little
> more secure.
> What do you think? WHat do u recommend? How would do solve this?
> 
> 
> Cheers, Mario
> 
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
-- 
You can get my public key at <http://steve.webninja.com>
or search for KeyID 0x0F737450 at www.keyserver.net

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: