Excerpts from Charles Galpin's message of Thu Mar 08 08:53:43 -0500 2012:

Hi Charles,

> I thought I'd share a few problems I ran into while setting up rssh
> 2.3.3 on centos 5.6 (64 bit) for sftp and rsync with a chrooted env
> in case it helps someone else (as your prvious posts helped
> me). They really all have to do with using a jailed/chrooted env.

Nice.  Thanks for sharing this.

> 1. mkchroot.sh didn't come bundled with the rpm. It would be nice if
> it did.

+1 for that.

> 1. The mkchroot.sh does not setup rsync. Since everything else seems
> to cater to rsync this looks like a bit of an ommission, but it's
> easy to add to the script if needed by just looking what is done for
> $sftp_server_path and adding the same for $rsync_path

I hadn't noticed that but my needs didn't include rsync.  Nice catch.

> 2. The mkchroot.sh doesn't appear to be 64 bit aware. This mainly
> got me on the name service resolution libraries so I added the
> following to the script

> cp /lib64/libnss_{files,ldap}* "$jail_dir/lib64"

This is good.  Ultimately, the script should detect the arch and use
the right paths.

I submitted a patch series[1] a while back that addressed some other
issues with mkchroot.sh too.  I didn't get any feedback at the time.
I know that future releases aren't likely unless a security is found,
but it would be cool of the rpm/deb maintainers to incorporate these
types of fix ups for the downstream folks! :)

Thanks
-Ben

[1] 
http://sourceforge.net/mailarchive/forum.php?thread_name=1310563577-13406-1-git-send-email-bwalton%40artsci.utoronto.ca&forum_name=rssh-discuss

--
Ben Walton
Systems Programmer - CHASS
University of Toronto
C:416.407.5610 | W:416.978.4302


------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
rssh-discuss mailing list
rssh-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rssh-discuss

Reply via email to