From owner-freebsd-security Mon Nov 5 7:49:49 2001 Delivered-To: freebsd-security@freebsd.org Received: from ns.uh.ru (ns.uh.ru [62.118.252.32]) by hub.freebsd.org (Postfix) with ESMTP id CEE6D37B416 for ; Mon, 5 Nov 2001 07:49:44 -0800 (PST) Received: from there (ppp74.yaroslavl.ru [217.15.128.74]) by ns.uh.ru (8.11.6/8.11.6) with SMTP id fA5FkLu62095 for ; Mon, 5 Nov 2001 18:46:22 +0300 (MSK) (envelope-from volax@uh.ru) Message-Id: <200111051546.fA5FkLu62095@ns.uh.ru> Content-Type: text/plain; charset="koi8-r" From: "Alexander S. Volchenkov" Reply-To: volax@uh.ru Organization: Superbmarket To: freebsd-security@FreeBSD.ORG Subject: Chrooted SSH2 problem Date: Mon, 5 Nov 2001 18:51:52 +0300 X-Mailer: KMail [version 1.3] MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi All! I've just installed ssh2 and trying to implement it's chroot feature. I have a problem with user login. User "dummy" is in the "chrooted" group. His home directory : /home/chrooted/dummy contains bin subdirectory with a mirror of /bin. User's shell is /bin/sh. Command: chroot /home/chrooted/dummy works fine. From /etc/sshd2_conf: ------------------------------------------- AllowGroups chrooted ChRootGroups chrooted ------------------------------------------- Client session: ------------------------------------------- gate# ssh2 -l dummy localhost dummy@localhost's password: Authentication successful. Connection to localhost closed. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ------------------------------------------- tail /var/log/messages: ------------------------------------------- sshd[16513]: User dummy's local password accepted. sshd[16513]: Password authentication for user dummy accepted. sshd[16513]: User dummy, coming from localhost.sbm, authenticated. ------------------------------------------- What I need to do to fix it? Thanks, Alexander S. Volchenkov (mailto:volax@uh.ru) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message