From owner-freebsd-hackers  Fri Feb 15  5:21:59 2002
Delivered-To: freebsd-hackers@freebsd.org
Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [134.226.81.11])
	by hub.freebsd.org (Postfix) with SMTP id 656D737B405
	for <freebsd-hackers@freebsd.org>; Fri, 15 Feb 2002 05:21:53 -0800 (PST)
Received: from walton.maths.tcd.ie by salmon.maths.tcd.ie with SMTP
          id <aa75105@salmon>; 15 Feb 2002 13:21:52 +0000 (GMT)
Date: Fri, 15 Feb 2002 13:21:52 +0000
From: David Malone <dwmalone@maths.tcd.ie>
To: Walter Hop <walter@binity.com>
Cc: FreeBSD Hackers <freebsd-hackers@freebsd.org>
Subject: Re: chroot+su idea
Message-ID: <20020215132152.GA7773@walton.maths.tcd.ie>
References: <18416867424.20020215140249@binity.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <18416867424.20020215140249@binity.com>
User-Agent: Mutt/1.3.25i
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

On Fri, Feb 15, 2002 at 02:02:49PM +0100, Walter Hop wrote:
> 2) chroot first, then su: undesired, as I would have to move a suid
>    root copy of the "su" tool into the chroot; also unpractical as I'd
>    have to duplicate a lot of files into the chroot to satisfy su.

Have you tried using a non-suid copy of su in the chroot? I'd guess
it would work OK as it would be running as root anyway.

	David.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message