List processes in a chroot

[__nico__]

Is there a way to list all the process that are in the same jail?
I know that FreeBSD jail can do that but is there something equivalent in grsecurity?

Thanks

[Alexei.Sheplyakov]

Code: Select all

CHROOT="/path/to/chroot"
PROCS=""
for p in `ps -o pid -A`; do
   if [ "`readlink /proc/$p/root`" = "$CHROOT" ]; then
      PROCS="$PROCS $p"
   fi
done
echo "Jailed in \"$CHROOT\": $PROCS"


[spender]

grsecurity's chroot restrictions can enforce that users inside a chroot jail can only view processes within the same jail.

-Brad

[Alexei.Sheplyakov]

grsecurity's chroot restrictions can enforce that users inside
a chroot jail can only view processes within the same jail.

Yes, so if /proc is mounted inside a jail (usually it is not) one can do

Code: Select all

chroot /path/to/jail ps -A