[scponly] scponly failed

[Kaleb Pederson]

When I expect that's the problem, I usually recommend the following:

ldconfig -r /path/to/chroot -v

Some versions of ldconfig don't support the -r option, so then the
following is an alternative:

cp `which ldd` /path/to/chroot
cp /bin/sh /path/to/chroot
chroot /path/to/chroot -s /bin/sh
ldd /path/to/program

By default, however, I think we would be better off just recommending
that everybody use jailkit or one of the other programs that's known
to work well creating chroots.

I have a python script that I use on Linux.  It will NOT work on all
Unix boxes because of the differences in ldd output.  However, it
should be pretty simple to change the regex's to support something
else.  I will attach this script, but note that it is NOT intended to
be complete or work on all platforms.  I had simple needs, and it met
those needs.

The main reason I use the attached script is to update my libraries
after I do program updates.  I simply re-run the script and then I'm
guaranteed that I have the latest version of all the dependencies.

I hope that helps.

--Kaleb

On Wed, Mar 12, 2008 at 2:44 AM, Arture Le Coiffeur
<arturelecoiffeur at elitemail.org> wrote:
> On Tuesday, 2008-03-11 at 08:08:59 -0800, Kaleb Pederson wrote:
>  > Thanks for the feedback Peter!  I hadn't heard of the "file not found"
>  > message being a symptom of missing libraries, so that's very useful to
>  > know.
>
>  Would it be useful to add ldd to the services supported by scponly, so
>  that one can easily use "ssh ... ldd /bin/foo" to check for missing
>  libraries?
>
>  Lupe Christoph
>  --
>  | The whole aim of practical politics is to keep the populace alarmed    |
>  | (and hence clamorous to be led to safety) by menacing it with an       |
>  | endless series of hobgoblins, all of them imaginary.                   |
>  | H. L. Mencken, "In Defense of Women", 1918                             |
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cplibdeps
Type: application/octet-stream
Size: 2854 bytes
Desc: not available
Url : https://lists.ccs.neu.edu/pipermail/scponly/attachments/20080312/d0b22b8a/attachment.obj