From owner-freebsd-questions@FreeBSD.ORG Sat Dec 6 13:17:46 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 125B216A4CE for ; Sat, 6 Dec 2003 13:17:46 -0800 (PST) Received: from mx1.webspacesolutions.com (ns1.webspacesolutions.com [216.74.11.68]) by mx1.FreeBSD.org (Postfix) with SMTP id 001CC43F93 for ; Sat, 6 Dec 2003 13:17:44 -0800 (PST) (envelope-from nick@webspacesolutions.com) Received: (qmail 4657 invoked by uid 507); 6 Dec 2003 21:17:16 -0000 Received: from nick@webspacesolutions.com by ns1.webspacesolutions.com by uid 504 with qmail-scanner-1.20rc1 (clamuko: 0.65. spamassassin: 2.55. Clear:RC:1:. Processed in 0.02225 secs); 06 Dec 2003 21:17:16 -0000 Received: from 24-205-247-185.ata-cres.charterpipeline.net (HELO beastie) (24.205.247.185) by mx1.webspacesolutions.com with SMTP; 6 Dec 2003 21:17:15 -0000 From: "Nick Twaddell" To: Date: Sat, 6 Dec 2003 13:18:13 -0800 Organization: Web Space Solutions MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 Thread-Index: AcO8PnS9PQd4SIBESJqtVFLBYHS9AA== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-Qmail-Scanner-Message-ID: <10707454356364652@ns1.webspacesolutions.com> Message-Id: <20031206211745.001CC43F93@mx1.FreeBSD.org> Subject: chroot environment X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Dec 2003 21:17:46 -0000 I am trying to setup a chroot environment for some users. I rebuilt the environment inside their userdir, copied all the appropriate binaries, libs, etc. The part I am stumped on, is how do you make it so their account gets chrooted on login. Since chroot can only be executed by root. Some of the docs I found created a shell script that would sudo chroot and run it on login. I am just wondering what everyone else recommends. Thanks Nick Twaddell