From owner-freebsd-questions Sat Jun 29 5:14: 3 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7096B37B400 for ; Sat, 29 Jun 2002 05:14:00 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 89CAB43E06 for ; Sat, 29 Jun 2002 05:13:59 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost.infracaninophile.co.uk [IPv6:::1]) by smtp.infracaninophile.co.uk (8.12.4/8.12.4) with ESMTP id g5TCDwtD017146; Sat, 29 Jun 2002 13:13:58 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost) by happy-idiot-talk.infracaninophile.co.uk (8.12.4/8.12.4/Submit) id g5TCDrOt017145; Sat, 29 Jun 2002 13:13:53 +0100 (BST) Date: Sat, 29 Jun 2002 13:13:53 +0100 From: Matthew Seaman To: FreeBSD user Cc: questions@FreeBSD.ORG Subject: Re: OpenSSH 3.4p1_1 and reverse ip Message-ID: <20020629121353.GA16920@happy-idiot-talk.infracaninophi> References: <20020629105843.GA15592@happy-idiot-talk.infracaninophi> <20020629053049.V67284-100000@Amber.XtremeDev.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020629053049.V67284-100000@Amber.XtremeDev.com> User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Jun 29, 2002 at 05:50:23AM -0600, FreeBSD user wrote: > > however, it's worth trying giving the chroot'ed sshd a copy of your > > resolv.conf to see if that makes a difference: > > > > cd ~sshd > > mkdir etc > > cp /etc/resolv.conf etc/ > > Tried that. I copied resolv.conf to /home/sshd/, ran vipw and set: > sshd:*:22:22::0:0:sshd privilege separation:/home/sshd:/nonexistent > And reran sshd again. It didn't change anything. But anything at this > point is worth trying. I appreciate the effort you've shown me. The chroot path is compiled into the sshd binary, not read from the passwd database. Unfortunately the location of that directory has moved about a bit over the past few revisions. If you install from ports, the sshd account is set up with it's home directory as the chroot used by sshd. My saying `~sshd' there was a futile attempt to avoid the full complexity of the situation. It goes like this: If you've installed openssh-portable from source without using the port, or if you're using the port and the directory /var/empty exists, then /var/empty will be used for the chroot. Otherwize, if you install from the port with -DOPENSSH_OVERWRITE_BASE but /var/empty doesn't exist, then /usr/empty will be used. If you just do a plain install from ports and /var/empty doesn't exist, then /usr/local/empty will be used. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way Tel: +44 1628 476614 Marlow Fax: +44 0870 0522645 Bucks., SL7 1TH UK To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message