View previous topic :: View next topic |
Author |
Message |
bakreule Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/15652206454111079dbbcf7.gif)
Joined: 27 Aug 2003 Posts: 233 Location: Paris, France
|
Posted: Thu Jun 24, 2004 11:07 am Post subject: trouble chrooting oidentd |
|
|
Hello all, I'm in the process of creating a chroot jail for oidentd on my Gentoo boxen, but I'm running into some problems. oidentd runs find just by itself, but it refuses to run in the chrooted environment. Here's what I've
done:
File Structure of chroot directory:
bin
dev
etc
lib
tmp
usr
sbin
var
run
The chrooted etc contains:
group passwd shadow ld.so.cache (regenerated in the
environment)
The chrooted /usr/sbin contains the oidentd executable.
dev contains:
crw-rw-rw- 1 root root 1, 3 Sep 2 15:00 null
crw-rw-rw- 1 root root 1, 5 Sep 2 18:05 zero
lib contains all the library files which were outputted by 'ldd /usr/sbin/oidentd' and 'lsof | grep oidentd', while oidentd was running of course.
I realize I don't have syslogging setup, but that doesn't matter, because I'm running oidentd with the -S and -q flags, which suppress logging. I'll turn them on later...
Command line is: chroot /chroothome/oidentd/ /usr/sbin/oidentd -u username -g groupname -S -q
oidentd DOES run fine in the chrooted environment without any flags. But of course it runs as root, which is completely undesirable. As soon as I add -u & -g options (W/O the -S -q), nothing happens. No output, no errors, just nothing. a 'ps -ef | grep oidentd' shows nothing.
My chrooted /etc/passwd and /etc/group contain the appropriate user and group, so there should be no problem. What am I missing? Do I have to regenerate the passwd database somehow?
I know I'm missing something small and stupid, but all my googling says that it should be up and running. Any help would be appreciated. Thanks! |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
RAPUL l33t
![l33t l33t](/images/ranks/rank_rect_4.gif)
![](images/avatars/45022887940014c18100a4.jpg)
Joined: 29 Dec 2002 Posts: 664 Location: Valencia (SPAIN)
|
Posted: Thu Jun 24, 2004 11:22 am Post subject: Hmm... |
|
|
Does username has permissions to go in /sbin or execute the daemon.
Without flags the daemon runs as root. So it should be permissions problem. _________________ Entropy rulz world.
Redundancy sux.
World is full of redundancy.
World sux. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
bakreule Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/15652206454111079dbbcf7.gif)
Joined: 27 Aug 2003 Posts: 233 Location: Paris, France
|
Posted: Thu Jun 24, 2004 11:51 am Post subject: |
|
|
I've got it working, though I did not find out what my problem was. I found a little article about setting up monkeyd in a chrooted environment. It mentioned the 'jail' package, which I didn't have. I was doing it all by hand.
I emerged it, ran some commands, and now oidentd runs fine in the chroot'd environment.
Thanks though for the response! |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|