grsecurity forums

How should i write paths in ACL for processes, that run from chrooted enviroment ?

Example:

Code: Select all

/
/var/
/var/chroot
/var/chroot/bin/xxxd
/var/chroot/lib/libXXX


xxxd daemon is chrooted in /var/chroot. When i write ACLs, should i write them for /var/chroot/bin/xxxd or i should write for /bin/xxxd ? Should i enable access for it to /var/chroot/some/files or to /some/files ?

You should write /var/chroot/bin/xxxd everywhere.