> The first way that I can think of is extremely hack-ish.
>
> Install stable normally, then install sid in a chroot using debootstrap.
> Add the desired user accounts to the sid system.
>
> Next, write a little C program that executes a command like
>
>     chroot /sid /bin/su - getenv("LOGNAME")
>
> Compile it, and then install it somewhere with root ownership and the
> setuid bit enabled.  **THIS WILL RENDER YOUR SYSTEM COMPLETELY INSECURE**.
> So don't put anything important on either part of this system.

🙂

That's the kind of solution I was hoping someone has developed enough to
iron out those major security issues (e.g. letting GDM do the chroot
before it changes its UID to that of the user).

Also, I have the impression that in the distant past (i.e. for TTY
logins) there was a way to setup users such that they would be put into
a chroot jail.  It's probably my memory playing tricks on me, tho.


        Stefan

Reply via email to