Re: Specify chrootdir independent of privsep_user's homedir
Roy Marples
Thu Apr 30 22:20:11 2020
On 30/04/2020 21:28, Roy Marples wrote:
1. a user's homedir is normally owned by them, however the chrootdir does not
need to be owned by the privsep_user (only $CHROOT/$DBDIR must be owned by
privsep_user).
This generally isn't true for system users in NetBSD - ie prefixed with _.
$ ls -l /var/chroot
total 11
drwxr-xr-x 4 root wheel 4 Mar 22 06:06 dhcpcd
drwxr-xr-x 2 root wheel 2 Mar 13 22:22 ftp-proxy
drwxr-xr-x 6 root wheel 6 Mar 13 22:22 named
drwxr-xr-x 4 _nsd _nsd 4 Mar 13 22:22 nsd
drwxr-xr-x 5 root wheel 5 Mar 13 22:22 ntpd
drwxr-xr-x 2 root wheel 2 Mar 13 22:22 pflogd
drwxr-xr-x 4 _rtadvd _rtadvd 4 Mar 13 22:22 rtadvd
drwxr-xr-x 2 root wheel 2 Mar 13 22:22 sshd
drwxr-xr-x 2 root wheel 2 Mar 13 22:22 tcpdump
drwxr-xr-x 2 root wheel 2 Mar 13 22:22 tftp-proxy
drwxr-xr-x 4 _unbound _unbound 4 Mar 13 22:22 unbound
Note to self - fix rtadvd to be owned by root.
Roy
Archive administrator: postmaster@marples.name