Re: chroot()ing a user's login

[Robert Varga <robi@piros.zold.net>]

On Sun, 12 Dec 1999, Ben Collins wrote:
> 
> 2) The shell must be available in the chrooted env (as well as all needed
> bianries).
> 
> So for this to work, you must have a complete working filesystem in each
> home directory (/home/foo/dev /home/foo/bin /home/foo/usr/bin /home/foo/etc
> ...).
> 
> This is not usually what you want for normal users (I've pondered doing
> this for the auto builder, but haven't gotten around to it yet).

Can this be carried out by copying the necessary binaries to somewhere in
the home filesystem and providing hardlinks for the /usr, /etc, /...
directories from each user's homedir?

This would greatly reduce the amount of problem a hacker can cause, does
it not?

Robert Varga