grsecurity forums

Hi!

I need some orientation plz. Here's the thing:

On one box of mine, i want to give shell access for some users, only for basic things, like editing configuration files, change permissions, common filesystem operations...

I was thinking of creating a jail environment using "Jail Chroot Project", found in http://www.gsyc.inf.uc3m.es/~assman/jail/.

Or.. using ACL's, can such an environment be simulated?

I'm not sure of the best way to do this...

Any thoughts will be appreciated. Thanks in advance.

Rodrigo

I Was looking for the Same thing.
"Jail Chroot Project" Did not work for me.
I applied grsecurity to a redhat Linux box 2.4.19 but I'm still wondering how to build a jail chroot environment using the ACL.
So any help here would be more than appreciated.

Debian (debootstrap is Deb prog and Debian has PAM)

1) mkdir /chroot then do debootstrap in /chroot and install distro there.
2) install pam_chroot and enable it
3) enable the chroot* flags in GrSecurity (ie. recompile sysctl)