Re: [Jailkit-users] SU problem in jail

[Kevin]

Hello Stan,

Don't know why you must jail the user while you want he is able to su to root.
It is not necessary to jail every account on you system. If you want
someone to be able to su, why not simply keep him not jailed?

Kevin

On Sun, Nov 9, 2008 at 6:34 PM, Čaniga Stanislav <address@hidden> wrote:
>
> Hi Oliver
>
> Thanks for looking into this:
>
> What I want to achieve is: disabled root ssh login (already works), and 
> having only few users in a "su" group, that are able to execute the su, to be 
> able to su to the root user and manage the system. I want all users to be 
> chrooted and only those in the "su"group can su.
>
> Stan
>
> On Nov 9, 2008, at 11.29 , Olivier Sessink wrote:
>
>> Čaniga Stanislav wrote:
>>>
>>> Hi all,
>>>
>>> I'm having a little problem with setting up the jailkit properly in
>>> order to use su as a chrooted user.
>>
>> what exactly do want to achieve? having 'su' inside a chroot jail is not
>> very common. su is a setuid binary (not recommended in a jail) and it
>> probably needs access to the shadow file (not in the jail) to check
>> passwords.
>>
>> perhaps there are other (more secure) ways to accomplish what you want
>> to do.
>>
>> Olivier
>>
>>
>> _______________________________________________
>> Jailkit-users mailing list
>> address@hidden
>> http://lists.nongnu.org/mailman/listinfo/jailkit-users
>
>
>
> _______________________________________________
> Jailkit-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/jailkit-users