[syslog-ng]FAQ-seeding: chroot jail procedure for Syslog-ng
Michael D. (Mick) Bauer
syslog-ng@lists.balabit.hu
Mon, 16 Aug 2004 12:55:30 -0500 (CDT)
Thanks! I'll post a revised procedure later this week -- replies
have been trickling in.
Cheers,
Mick
> On Sun, 15 Aug 2004 14:21:27 -0500 (CDT)
> "Michael D. (Mick) Bauer" <darth.elmo@wiremonkeys.org> wrote:
>
>> So far I haven't noticed that anything else needs to be added to
>> the chroot jail (e.g., stuff from /dev or /etc), but if anyone
>> knows differently please speak up!
>
> Mick,
>
> It's been awhile since I last setup syslog-ng in a chroot jail,
> but according to my notes I did the following on a recent Linux
> box:
>
> o copied the follow files to /path/to/chroot/lib:
>
> libnss_dns.so.2
> libnss_files.so.2
> libresolv.so.2
> libnsl.so.2
> libc.so.6
> ld-linux.so.2
>
> the first of which, being the one that seemed to actually be
> required for correct operation in my case. I believe the
> others were just referenced libraries, but not actually
> called.
>
> o copied the following to /path/to/chroot/etc
>
> nsswitch.conf
> resolv.conf
> `grep syslogng passwd`
> `grep syslogng group`
>
> the last two being whatever user/group you used to run
> syslog-ng as.
>
> John
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at
> http://www.campin.net/syslog-ng/faq.html
/-------------------------------------------------\
| Michael D. (Mick) Bauer |
| Security Editor, Linux Journal |
| Dir. of Value-Subtracted Svcs., Wiremonkeys.org |
\-------------------------------------------------/