Chrooted SSH apps

[bkrausz]

I'm trying to provide Nano and a couple of other apps for my users (I just upgraded to the latest ispconfig). I edited /root/ispconfig/scripts/shell/creat_chrooted_env.sh and added /bin/nano and /usr/bin/nano to APPS, and reran it, but whenever I try to run nano I get an "Error opening terminal: xterm." error. Any way I can include xterm in the chroot?

Thanks!!

[till]

Maybe you can find the dependencys with strace as described here:

http://olivier.sessink.nl/jailkit/ho...bug_jails.html

[bkrausz]

I spent a few hours hunting and I can't find exactly what you need to do to run xterm. I'm gonna try copying some more libs tomorrow...if anybody else is looking into this, please post, otherwise thanks for the recommendation till, I'll post if I find something.

[falko]

Did you have a look at this tutorial? http://www.howtoforge.com/chrooted_ssh_howto_debian

[bkrausz]

I did follow that howto...I found my problem.

There needs to be a couple of xterm files from the etc dir in the folder. Here's how to add nano:

EDIT /root/ispconfig/scripts/shell/create_chroot_env.sh
ADD /bin/nano to the end of the APPS= line (before the last ")
ADD at the bottom:
#Allow nano to work
mkdir ./etc/terminfo/x/
cp /etc/terminfo/x/* ./etc/terminfo/x/

And viola!

[Tenaka]

ok, but how would I add more apps (i.e. nano ) after having done all that, shall I simply rerun the whole how-to with the changed settings including more libbs and apps?

[till]

Originally Posted by Tenaka

ok, but how would I add more apps (i.e. nano ) after having done all that, shall I simply rerun the whole how-to with the changed settings including more libbs and apps?

There is no need of rerunning the howto.

Just add the additional applications in the line APPS="....." in the file /root/ispconfig/scripts/shell/create_chroot_env.sh

When you update or create a new user in ISPConfig, the chroot enviroment will be rebuild with all the applications listed in that line.

[Tenaka]

I updated my user and nothing happened...

I just tried to run the script manually:

h898552:~/ispconfig/scripts/shell# ./create_chroot_env.sh
Usage: ./create_chroot_env username
h898552:~/ispconfig/scripts/shell# ./create_chroot_env.sh web1_postmaster
mkdir: cannot create directory `etc': File exists
mkdir: cannot create directory `bin': File exists
mkdir: cannot create directory `usr': File exists
mkdir: cannot create directory `usr/bin': File exists
cp: cannot create regular file `.//bin/bash': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//usr/lib/i686/cmov/libcrypto.so.0.9.7': No such file or directory
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
cp: cannot create regular file `.//lib/ld-linux.so.2': Text file busy
mkdir: cannot create directory `./etc/terminfo/x/': No such file or directory
cp: `./etc/terminfo/x/': specified destination directory does not exist
Try `cp --help' for more information.
h898552:~/ispconfig/scripts/shell# ls

anything wrong doing this like this? I am root and trying to use the script for the user web1_postmaster

[till]

Have you been logged in as web1_postmaster with a second console as you run the chroot script?

[Tenaka]

no I did not.

anyway this psot should be obsolte by now as my question has (almost) been answered in this post here: http://www.howtoforge.com/forums/sho...?t=1739&page=2

it seems the script still has some error like it should say mkdir - p instead of just mkdir and severall other problems pointed out in that post.