From owner-freebsd-chat Tue Mar 9 8: 8:27 1999 Delivered-To: freebsd-chat@freebsd.org Received: from o-o.org (o-o.org [207.252.201.100]) by hub.freebsd.org (Postfix) with ESMTP id 70CE214F90 for ; Tue, 9 Mar 1999 08:08:19 -0800 (PST) (envelope-from licia@o-o.org) Received: from localhost (root@localhost) by o-o.org (8.8.8/8.8.8) with ESMTP id KAA09718; Tue, 9 Mar 1999 10:08:11 -0600 (CST) (envelope-from licia@o-o.org) Date: Tue, 9 Mar 1999 10:08:10 -0600 (CST) From: Licia To: freebsd-chat@freebsd.org Cc: fad@o-o.org Subject: A new feature for /usr/bin/login (feedback requested) Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I'm finally getting around to coding a feature into /usr/bin/login that I have need for at work and on my home system, and would like feedback from anyone else who might want to use/see a copy of it when I'm done. I'm going to alter login so that any person with a login group of 80 will be automagically chrooted. If there is an entry for them in /etc/chroots they will be chrooted to the specified area (allowing several people to be chrooted to a common sub-area) and if there isn't an entry for them, they will be chrooted to their home directories. The things I specifically would like feedback on are : 1. Should the login group be set to a different gid for some reason? If so, why and what would be a better group? 2. Should I build some sort of prepackaged utility to set up chrooted environments (creating directory hierarchies, copying binaries, libraries, device files, etc) and if so what would the -minimum- set be for basic functionality? 3. The format for /etc/chroots will be username:path-to-root does anyone have a problem with that? :) 4. Anything else anyone wants to comment on regarding this that is useful or at least interesting :) [ licia@o-o.org ] [ http://www.o-o.org/~licia/ ] [ Alias : Ladywolf] [ Telnet to o-o.org and log in as bbs ] [ ssh -l bbs -C o-o.org ] [ A happy user of FreeBSD : http://www.freebsd.org/ ] main(){int num[4]={1768122732,762265697,1919889007,103};printf("%s\n",num);} To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message