[scponly] Scponly - chroot

Jeff MacDonald jeff at interchange.ca
Mon May 26 15:45:31 EDT 2003


Oddly enough, I have a man page for scponly, but not scponlyc.

Anyway, I set the shell for a test user to scponlyc, and when I try
to login with WinSCP2 I barfs about not being able to get group listings
and some other stuff.

I assume that means to use scponlyc, I have to use jail ?

Jeff.

>> -----Original Message-----
>> From: Lupe Christoph [mailto:lupe at lupe-christoph.de] 
>> Sent: Monday, May 26, 2003 12:38 PM
>> To: Jeff MacDonald
>> Cc: scponly at lists.ccs.neu.edu
>> Subject: Re: [scponly] Scponly - chroot
>> 
>> 
>> On Monday, 2003-05-26 at 12:18:33 -0400, Jeff MacDonald wrote:
>> 
>> > About chrooting scponly. Why do I need to setup a jail.
>> 
>> scponly does not support FreeBSD jails.
>> 
>> > Why can't I just use normal chroot ?
>> 
>> Depends on what you mean with that. scponly uses the normal chroot()
>> system call. If you mean the chroot *command*, that only 
>> works for root.
>> You need a SUID executable that calls chroot(). See above...
>> 
>> Apart from that, scponlyc does a few nice things chroot (the command)
>> does not do. Read the manpage.
>> 
>> HTH,
>> Lupe Christoph
>> -- 
>> | lupe at lupe-christoph.de       |           
>> http://www.lupe-christoph.de/ |
>> | "Violence is the resort of 
>> the violent" Lu Tze                         |
>> | "Thief of Time", Terry Pratchett                           
>>             |
>> 



More information about the scponly mailing list