I've been through a hundred threads saying there is no way around the chroot symlink problem. This page is incredibly helpful. OpenBSD doesn't have "mount -bind", but I believe there is a "mount_union" command which may work. I am investigating it now. I hope someone finds this as helpful as I did.
Thanks for the tip. Here is my two cents. I'm planning to run several Chrooted services on a single host. Evry service needs some executables, some libs etc., but i have only limmited storage capacity available. I don't want to break chrooting by mounting /bin, /usr/lib etc. in each service jail. So i intend to do this: - Copy every file, needed by more than one service, to its own directory. - For alll services make mountpoints for each file the service needs in its jail. - Mount --bind everything - Use symlinks to get the structure needed in each service jail. I might use LIDS (to restrict capabilities of root) for further security.
All Comments
www.poker-w.com
www.texas-holdem-big.com
texas holdem here :) right free
online texas holdem here. But right away here
http://www.texas-holdem-p.com you can find the right info for play texas holdem
now.
online poker here :) right free
online poker here. But right away here
http://www.online-poker-888.us you can find the right info for play online poker
now.
recommen this website online poker . Please refer to our
friends and play online poker also free
online poker http://www.online-poker-888.us to our best greetings.
I'm planning to run several Chrooted services on a single host. Evry service needs some executables, some libs etc., but i have only limmited storage capacity available. I don't want to break chrooting by mounting /bin, /usr/lib etc. in each service jail.
So i intend to do this:
- Copy every file, needed by more than one service, to its own directory.
- For alll services make mountpoints for each file the service needs in its jail.
- Mount --bind everything
- Use symlinks to get the structure needed in each service jail.
I might use LIDS (to restrict capabilities of root) for further security.