Package: makejail
Version: 0.0.5-5
Severity: normal

Hi,

I just used makejail to setup a chrooted apache2 (actually, apache2 is chrooted
using mod_chroot, but makejail was used to provide some files into the
chroot).  It works well, but makejail won't respect attributes used on the
chrooted file. For instance, I need to copy the suexec2 into the chroot, and it
needs to be setuid root. This is bad in a chroot, but suexec is fairly secure,
and I need to run php scripts with a different uid/gid for each vhost.
However, makejail won't keep the suid bit.

After a quick look to the code, it seems like ACL or extended attributes
wouldn't be reproduced either (I'm not a python coder myself, so I may be
wrong).

Maybe it would make sense to use cp -a to copy the file, relying then on
coreutil to preserve every file attribute ?

Best regards,


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11-1-k7
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages makejail depends on:
pn  binstats                                 Not found.
ii  coreutils                     5.2.1-2    The GNU core utilities
ii  psmisc                        21.6-1     Utilities that use the proc filesy
ii  python                        2.3.5-2    An interactive high-level object-o
ii  strace                        4.5.11-1   A system call tracer

-- 
Clément "nodens" Hermann

Reply via email to