Re: chroot jail problem
On Fri, 14 Feb 2014 14:01:55 +0100
Antonio Fernández Pérez <antoniofernandez@fabergames.com> wrote:
> Ups! Sorry, I forgot paste the link.
>
> I have used this: wget
> http://www.fuschlberger.net/programs/ssh-scp-sftp-chroot-jail/make_chroot_jail.sh
Ok. So, this script was written before Debian implemented multilib,
which, in turn, changed filesystem layout.
So,
/lib/libnsl.so.1
now lives at
/lib/x86_64-linux-gnu/libnsl.so.1
What's worse, is that some libraries have changed soname since then. So,
/lib/libcap.so.1
became
/lib/x86_64-linux-gnu/libcap.so.2
A quick fix to that is attached to this e-mail.
> Maybe I should to implment chroot jail technique with another methods ...
Possibly. I'd use debootstrap for that.
Reco
--- make_chroot_jail.sh.orig 2014-02-14 20:35:37.466358387 +0400
+++ make_chroot_jail.sh 2014-02-14 20:38:27.150352350 +0400
@@ -469,7 +469,8 @@
# needed for scp on RHEL
echo "export LD_LIBRARY_PATH=/usr/kerberos/lib" >> ${JAILPATH}/etc/profile
elif [ "$DISTRO" = DEBIAN ]; then
- cp /lib/libnss_compat.so.2 /lib/libnsl.so.1 /lib/libnss_files.so.2 /lib/libcap.so.1 /lib/libnss_dns.so.2 ${JAILPATH}/lib/
+ cp /lib/x86_64-linux-gnu/libnss_compat.so.2 /lib/x86_64-linux-gnu/libnsl.so.1 /lib/x86_64-linux-gnu/libnss_files.so.2 \
+ /lib/x86_64-linux-gnu/libcap.so.2 /lib/x86_64-linux-gnu/libnss_dns.so.2 ${JAILPATH}/lib/
else
cp /lib/libnss_compat.so.2 /lib/libnsl.so.1 /lib/libnss_files.so.2 /lib/libcap.so.1 /lib/libnss_dns.so.2 ${JAILPATH}/lib/
fi
Reply to: