From owner-freebsd-questions@FreeBSD.ORG Sat Dec 6 22:57:20 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CE90716A4CE for ; Sat, 6 Dec 2003 22:57:20 -0800 (PST) Received: from dns10.mail.yahoo.co.jp (dns10.mail.yahoo.co.jp [210.81.151.143]) by mx1.FreeBSD.org (Postfix) with SMTP id 0A98543FF5 for ; Sat, 6 Dec 2003 22:57:19 -0800 (PST) (envelope-from ayakokiko@ybb.ne.jp) Received: from unknown (HELO gorgon.near.this) (219.11.234.11 with poptime) by dns10.mail.yahoo.co.jp with SMTP; 7 Dec 2003 06:57:17 -0000 X-Apparently-From: Received: from ghost.near.this (ghost.near.this [10.0.3.9]) by gorgon.near.this (Postfix) with ESMTP id 293CF7F81; Sun, 7 Dec 2003 15:57:13 +0900 (JST) Received: by ghost.near.this (Postfix, from userid 100) id 446E91934B; Sun, 7 Dec 2003 15:57:12 +0900 (JST) Date: Sun, 7 Dec 2003 15:57:11 +0900 From: horio shoichi To: "Nick Twaddell" In-Reply-To: <20031206211745.001CC43F93@mx1.FreeBSD.org> References: <20031206211745.001CC43F93@mx1.FreeBSD.org> X-Mailer: Sylpheed version 0.9.6claws (GTK+ 1.2.10; i386-portbld-freebsd4.8) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Message-Id: <20031207.065712.ad48f91876c124a7.10.0.3.9@bugsgrief.net> cc: freebsd-questions@freebsd.org Subject: Re: chroot environment X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Dec 2003 06:57:20 -0000 On Sat, 6 Dec 2003 13:18:13 -0800 "Nick Twaddell" wrote: > I am trying to setup a chroot environment for some users. I rebuilt the > environment inside their userdir, copied all the appropriate binaries, libs, > etc. The part I am stumped on, is how do you make it so their account gets > chrooted on login. Since chroot can only be executed by root. Some of the > docs I found created a shell script that would sudo chroot and run it on > login. I am just wondering what everyone else recommends. > > Thanks > > Nick Twaddell > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > Answer1: security/chrootuid. Answer2: Build jail(8) environment, install sshd, for example, on each jail. Let each user login to the respective account. horio shoichi