Full Disclosure mailing list archives

Re: (no subject) [was: White Paper - Chrooting sshd]


From: Paul Sebastian Ziegler <psz () observed de>
Date: Mon, 16 Jul 2007 12:10:11 +0200

I don't get your point.
As I said in the paper all the informations that -I- found were either
outdated or unusable. That may be my disability in finding stuff, but
obviously other people had the same difficulties. Since it's release
this paper has been downloaded nonstop and spread to quite a few major
project's archives as well. That should prove that at least -some-
others were looking for this information.

So please explain your point to me.
This is an LGPL-licensed paper. What is your problem with publishing one
of these?

Oh, and please enter a subject next time. I almost missed your mail.

Many Greetings
Paul

toto.toto () webmail co za schrieb:
oh so your paper rox better than all paper about chrooting sshd ?
dude, all thing written in your paper is known since a while !

Sometimes it may become profitable or necessary to jail the ssh daemon
within a chroot. Unluckily there aren't many papers out there that
explain the process of creating an appropriate jail and resolving all
the necessary dependencies and errors.


This paper will show you how to successfully jail sshd itself. Opposed
to many other papers out there it does not try to jail the users after
logging in but rather put the entire daemon into the jail. This approach
is interesting for anybody paranoid enough to want to protect against
remotely exploitable flaws in the used sshd.





-------------------------------------------
South Africas premier free email service - www.webmail.co.za
------------------------------------------------------------------
For super low premiums, click here http://www.webmail.co.za/dd.pwm

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: