* Re: [gentoo-user] rescrict command to certain dirs
@ 2007-08-04 14:01 99% ` Boyd Stephen Smith Jr.
0 siblings, 0 replies; 1+ results
From: Boyd Stephen Smith Jr. @ 2007-08-04 14:01 UTC (permalink / raw
To: gentoo-user
[-- Attachment #1: Type: text/plain, Size: 1031 bytes --]
On Thursday 02 August 2007 08:54:21 am Martin Gysel wrote:
> I have a webserver running for multiple 'endusers'. No I want to give
> some costumers access to certain files as user WEBSERVER for easy
> editing configuration file owned by the webserver.
>
> it should do something like jail the user to
> /var/www/vhosts/DOMAIN/httpdocs/DIRtoFILES and let him perform some
> commands (rm, less, nano, etc) there as user WEBSERVER.
As long as WEBSERVER isn't root, you should be able to use a combination of
sudo/su and chroot. There are some ways to escape a chroot, but I *think*
they all depend on being root inside the chroot, or exploiting other service
running outside the chroot. (E.g. if connections from localhost
are "trusted".)
--
Boyd Stephen Smith Jr. ,= ,-_-. =.
bss03@volumehost.net ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.org/ \_/
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2007-08-02 13:54 [gentoo-user] rescrict command to certain dirs Martin Gysel
2007-08-04 14:01 99% ` Boyd Stephen Smith Jr.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox