Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Vista
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
Secure Shell
Back to list
|
Post reply
Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 23 2008 08:15PM
D M (dm mlist gmail com)
(2 replies)
Re: Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 24 2008 11:14PM
Jon Kibler (Jon Kibler aset com)
(1 replies)
Re: Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 24 2008 11:24PM
D M (dm mlist gmail com)
(1 replies)
Re: Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 25 2008 05:48PM
Greg Wooledge (wooledg eeg ccf org)
(1 replies)
Re: Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 28 2008 02:56PM
D M (dm mlist gmail com)
(1 replies)
Re: Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 29 2008 08:12AM
Vladimir Levijev (vladimir levijev gmail com)
(1 replies)
Re: Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 29 2008 08:50PM
D M (dm mlist gmail com)
Thank you very much... The problem was I didn't have /lib in the
jail.. only /usr/lib
thanks
dm
On Tue, Jul 29, 2008 at 3:12 AM, Vladimir Levijev
<vladimir.levijev (at) gmail (dot) com [email concealed]> wrote:
> 2008/7/28, D M <dm.mlist (at) gmail (dot) com [email concealed]>:
>
>> here is a listing of my etc directory inside the jail:
>> ls -la
>> total 916
>> drwxr-xr-x 3 0 0 4096 Jul 28 14:31 .
>> drwxr-xr-x 18 0 0 4096 Jul 28 14:35 ..
>>
>> -rw-r--r-- 1 0 0 11 Jul 22 17:00 group
>>
>> -r-------- 1 0 0 555 Jul 28 14:31 gshadow
>>
>> -rwxr-xr-x 1 0 0 245 Jul 22 17:00 hosts
>> -rwxr-xr-x 1 0 0 24120 Jul 22 17:00 ld.so.cache
>> -rwxr-xr-x 1 0 0 28 Jul 22 17:00 ld.so.conf
>>
>> drwxr-xr-x 2 0 0 4096 Jul 22 17:00 ld.so.conf.d
>> -rw-r--r-- 1 0 0 1696 Jul 22 17:00 nsswitch.conf
>>
>> -rw-r--r-- 1 0 0 144 Jul 24 17:04 passwd
>> -rwxr-xr-x 1 0 0 66 Jul 22 17:00 resolv.conf
>>
>> -r-------- 1 0 0 1607 Jul 28 14:30 shadow
>>
>> -rw-r--r-- 1 0 0 807103 Jul 22 17:00 termcap
>>
>>
>> As you can see all required files are there and have proper
>> permissions. I've copied over everything from /usr/lib into the jail
>> as well. However is still not properly doing the translation of uid to
>> name or guid to name.
>
> What is passwd section set to in nsswitch.conf? On my Debian testing
> system it's "compat":
>
> $ grep passwd /etc/nsswitch.conf
> passwd: compat
>
> Make sure you have the nss libraries available for the passwd entries.
> When I strace the command I have it checking for next libs:
>
> $ strace id -un 2>&1 | grep libnss
> open("/lib/i686/cmov/libnss_compat.so.2", O_RDONLY) = 3
> open("/lib/i686/cmov/libnss_nis.so.2", O_RDONLY) = 3
> open("/lib/i686/cmov/libnss_files.so.2", O_RDONLY) = 3
>
> Cheers,
>
> VL
>
[ reply ]
Re: Can't run whoami(id -un) inside chroot jail using openssh native jail support
Jul 24 2008 07:41PM
Vladimir Levijev (vladimir levijev gmail com)
Privacy Statement
Copyright 2008, SecurityFocus
jail.. only /usr/lib
thanks
dm
On Tue, Jul 29, 2008 at 3:12 AM, Vladimir Levijev
<vladimir.levijev (at) gmail (dot) com [email concealed]> wrote:
> 2008/7/28, D M <dm.mlist (at) gmail (dot) com [email concealed]>:
>
>> here is a listing of my etc directory inside the jail:
>> ls -la
>> total 916
>> drwxr-xr-x 3 0 0 4096 Jul 28 14:31 .
>> drwxr-xr-x 18 0 0 4096 Jul 28 14:35 ..
>>
>> -rw-r--r-- 1 0 0 11 Jul 22 17:00 group
>>
>> -r-------- 1 0 0 555 Jul 28 14:31 gshadow
>>
>> -rwxr-xr-x 1 0 0 245 Jul 22 17:00 hosts
>> -rwxr-xr-x 1 0 0 24120 Jul 22 17:00 ld.so.cache
>> -rwxr-xr-x 1 0 0 28 Jul 22 17:00 ld.so.conf
>>
>> drwxr-xr-x 2 0 0 4096 Jul 22 17:00 ld.so.conf.d
>> -rw-r--r-- 1 0 0 1696 Jul 22 17:00 nsswitch.conf
>>
>> -rw-r--r-- 1 0 0 144 Jul 24 17:04 passwd
>> -rwxr-xr-x 1 0 0 66 Jul 22 17:00 resolv.conf
>>
>> -r-------- 1 0 0 1607 Jul 28 14:30 shadow
>>
>> -rw-r--r-- 1 0 0 807103 Jul 22 17:00 termcap
>>
>>
>> As you can see all required files are there and have proper
>> permissions. I've copied over everything from /usr/lib into the jail
>> as well. However is still not properly doing the translation of uid to
>> name or guid to name.
>
> What is passwd section set to in nsswitch.conf? On my Debian testing
> system it's "compat":
>
> $ grep passwd /etc/nsswitch.conf
> passwd: compat
>
> Make sure you have the nss libraries available for the passwd entries.
> When I strace the command I have it checking for next libs:
>
> $ strace id -un 2>&1 | grep libnss
> open("/lib/i686/cmov/libnss_compat.so.2", O_RDONLY) = 3
> open("/lib/i686/cmov/libnss_nis.so.2", O_RDONLY) = 3
> open("/lib/i686/cmov/libnss_files.so.2", O_RDONLY) = 3
>
> Cheers,
>
> VL
>
[ reply ]