Running eggdrop in a chroot jail?

skiprosebaugh · Post by **skiprosebaugh** » Thu Mar 14, 2002 1:45 am

Is it possible to run eggdrop in a chroot jail?

guppy · Post by **guppy** » Thu Mar 14, 2002 2:28 am

Yup -- I've done it a few times .. long as you know a bit of c it can be done very easily. It is possible to run pretty much every program in a chroot jail.

I'll look later to see if I still have the .diff I made of my changes.

Petersen · Post by **Petersen** » Thu Mar 14, 2002 8:03 am

well, there's 2 ways to do it. first way is to start the bot within a chrooted shell (ie /bin/sh chroots to somewhere first). as long as the bot is compiled statically it should work (though it might need access to a /dev/null and /dev/zero relative to its chroot dir).
the second way is more interesting. it involves you starting the bot as a root process (which means you gotta remove the check that prevents this), then get it to call chroot() and then setuid() so it ain't running as root anymore.

Yourname · Post by **Yourname** » Thu Mar 14, 2002 1:34 pm

Outta curiosity, whats a chroot jail?

<font size=-1>[ This Message was edited by: Yourname on 2002-03-14 10:36 ]</font>

Petersen · Post by **Petersen** » Thu Mar 14, 2002 2:33 pm

read chroot(2)

guppy · Post by **guppy** » Fri Mar 15, 2002 9:31 pm

http://www.techmonkeys.org/~guppy/eggdr ... hroot.diff

Quick patch to chroot eggdrop -- all you should have to do is edit src/chroot.h properly. Also, you have to setup your /chroot directory with the proper libs and such that eggdrop requires.

Jeff

Petersen · Post by **Petersen** » Fri Mar 15, 2002 10:44 pm

heh, almost exactly the same as how i did it

guppy · Post by **guppy** » Sat Mar 16, 2002 12:50 am

NO! You stole my code .. I am suing you under that stupid US law for hacking me and reverse engineering my binary!!

~

Jeff