[Bug 479546] Review Request: jailkit - Jailkit limits user accounts to specific files and/or commands

bugzilla at redhat.com bugzilla at redhat.com
Sun Mar 1 22:13:33 UTC 2009


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=479546





--- Comment #17 from Dale Bewley <dale at bewley.net>  2009-03-01 17:13:31 EDT ---
I think checking the hardcoded paths in the configs is a good idea. I found 78
executables in jk_init.ini and did a quick check on one system. I  didn't have
all those packages installed, but most paths seem right. I know at least a
couple are wrong, vi, nice, xauth...

# for f in `grep bin jk_init.ini |sed -e 's/^executables = //' -e 's/,/\n/g' -e
's/ //g' -e 's/^#.*//'|sort -u `; do ls $f; done|grep 'No such'
ls: cannot access /bin/uncompress: No such file or directory
ls: cannot access /usb/bin/joe: No such file or directory
ls: cannot access /usb/bin/whoami: No such file or directory
ls: cannot access /usr/bin/lynx: No such file or directory
ls: cannot access /usr/bin/mc: No such file or directory
ls: cannot access /usr/bin/mcedit: No such file or directory
ls: cannot access /usr/bin/mcview: No such file or directory
ls: cannot access /usr/bin/nice: No such file or directory
ls: cannot access /usr/bin/sort: No such file or directory
ls: cannot access /usr/bin/vi: No such file or directory
ls: cannot access /usr/bin/X11/xauth: No such file or directory
ls: cannot access /usr/bin/Xrealvnc: No such file or directory
ls: cannot access /usr/sbin/apache: No such file or directory
ls: cannot access /usr/sbin/jk_lsh: No such file or directory

If you put your latest changes online, I can probably find the time to finish
it up pretty soon if you like.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.




More information about the Fedora-package-review mailing list