ACL rules + chrooted enviroment question

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

ACL rules + chrooted enviroment question

Postby `VL » Fri Apr 08, 2005 3:16 am

How should i write paths in ACL for processes, that run from chrooted enviroment ?

Example:

Code: Select all
/
/var/
/var/chroot
/var/chroot/bin/xxxd
/var/chroot/lib/libXXX


xxxd daemon is chrooted in /var/chroot. When i write ACLs, should i write them for /var/chroot/bin/xxxd or i should write for /bin/xxxd ? Should i enable access for it to /var/chroot/some/files or to /some/files ?
`VL
 
Posts: 28
Joined: Wed Feb 23, 2005 2:11 pm

Postby onyx » Fri Apr 08, 2005 7:01 am

You should write /var/chroot/bin/xxxd everywhere.
onyx
 
Posts: 36
Joined: Tue Jan 20, 2004 7:46 pm


Return to grsecurity support