Opened bug report at mainstream.
https://github.com/systemd/systemd/issues/12498
On Tue, May 7, 2019 at 12:17 PM Peter Viskup wrote:
> It is related to systemd processing of chroot, as with commenting the User
> setting, the service start up successfully.
>
> Want to mimic the startup of the ser
It is related to systemd processing of chroot, as with commenting the User
setting, the service start up successfully.
Want to mimic the startup of the service in init script on Debian8 (which
is running fine):
~# start-stop-daemon --start --quiet --pidfile
"/srv/inst/var/run/rsyslogd.pid" --chuid
On Tue, May 07, 2019 at 11:08:38AM +0200, Peter Viskup wrote:
> Running Debian9 with systemd 241-3~bpo9+1 from backports.
> Having trouble to start rsyslog service in chroot jail using the systemd
> service file with RootDirectory and User settings.
> Setting AmbientCapabilities=CAP_SYS_CHROOT does
Running Debian9 with systemd 241-3~bpo9+1 from backports.
Having trouble to start rsyslog service in chroot jail using the systemd
service file with RootDirectory and User settings.
Setting AmbientCapabilities=CAP_SYS_CHROOT does not help and still getting
following errors:
rsyslog-chroot@inst.se
x27;m root. I'm running my logging daemon as an
unprivileged user, and my log files are missing kernel messages.
My Initial research mentioned SELinux, and discussed tweaking my
security policies, but I'm thinking that SELinux is not even turned on.
I'm running etch, and I've
> > Sometime back somebody told me there was a way to add a user account
> > where the user was very limited in what he could do. As I remember, the
> > user would not even be able to change directories.
>
>
> Try googling for "chroot user"
>
> Rgds
>
> Rus
Thanks Rus. It turns out that what
> Dear All,
>
> Sometime back somebody told me there was a way to add a user account
> where the user was very limited in what he could do. As I remember, the
> user would not even be able to change directories.
Try googling for "chroot user"
Rgds
Rus
--
w: http://www.jvds.com | Linux + Free
n
up what I was looking for. I wondering if anyone could enlighten me. Note that I'm not
sure "unprivileged user" is the correct name for this type of account, so if I've got
the terminology wrong, please let me know.
regards,
Robert
--
To UNSUBSCRIBE, email to [EMAIL PROT
8 matches
Mail list logo