Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
chroot basics
  • chroniccommand
    Posts: 1,389
    So I decided to make this for some people who could be interested in Unix box security, etc..

    What is chroot?
    What is called a "chroot" on Unix systems, is changing the disk's root directory for the current process and it's children process. If a program is "re-rooted" or chroot'ed into another root directory it cannot access any file / directory outside of it's root directory. That directory is called either a "chroot jail" or "chroot prison". This is used for security reasons in a Unix-like box, to prevent loss of files or directories etc..

    What chroot cant do
    A root, or super user, can change the chroot and manipulate it however they want. If a user manages to gain root, the attacker may do whatever he wants. This provides some insecurities to the box. If you are into white hat, and want to secure your box you should take every precaution you can while making the "chroot jail". If you're into the black hat type thing, you should learn how to exploit a chroot jail and break out of it. On most systems, chroot contexts do not stack properly and chrooted programs with sufficient privileges may perform a second chroot to break out. Plus, only a root user can preform a chroot. So if you're not root, you cannot create a chroot jail.

    For more info, visit:
    http://en.wikipedia.org/wiki/Chroot
    http://www.freebsd.org/cgi/man.cgi?quer ... &sektion=2
    http://ss64.com/bash/chroot.html

    I hope you enjoyed this very short intro to CHROOT.

    --Chroniccommand
  • Xin
    Posts: 3,251
    Nice little paper learned a lot :)
    Xin
  • chroniccommand
    Posts: 1,389
    No problem glad I could give some info to you :P
  • Bursihido
    Posts: 406
    thanks for share :)
  • chroniccommand
    Posts: 1,389
    Its not a share if I made it.
  • Bursihido
    Posts: 406
    said:


    Its not a share if I made it.



    okay :blush: