The compiler is gcc version 3.4.5, from blastwave.
\nGot the sources for:
\nzlib-1.2.3
\nopenssl-0.9.8d
\nopenssh-4.5.1
\nUntar them all and apply the chroot patch “openssh-4.5p1-sshjail.patch” to openssh-4.5.1
\nBuild them in that order.
\nTo build zlib do:
\n# .\/configure –prefix=\/opt\/acsssh –shared
\n# make && make install
\nTo build openssl:
\n# .\/config shared –prefix=\/opt\/acsssh
\n# make && make install
\nTo build openssh
\n#.\/configure –with-pam –prefix=\/opt\/acsssh –with-ssl-dir=\/opt\/acsssh –with-zlib=\/opt\/acsssh
\n# make && make install
\nTo build the chrooted jail i modded a script, jail.ksh, with contents:
\n#!\/usr\/bin\/ksh
\nJAILUSER=juser
\nJAILGROUP=jgroup
\necho “deleting previous structures”
\nuserdel -r $JAILUSER
\ngroupdel $JAILGROUP
\nrm -fR \/export\/home\/jail
\necho ” deleted”
\nSDIR=opt\/acsssh
\n\/usr\/sbin\/groupadd $JAILGROUP
\nmkdir -p \/export\/home\/jail
\nchown root:$JAILGROUP \/export\/home\/jail
\nchmod 750 \/export\/home\/jail
\n\/usr\/sbin\/useradd -g $JAILGROUP -c “Jail user $JAILUSER” -d \/export\/home\/jail\/$JAILUSER\/export\/home\/$JAILUSER -s \/bin\/sh $JAILUSER
\nmkdir -p \/export\/home\/jail\/$JAILUSER
\n202\/433
\nchown $JAILUSER:$JAILGROUP \/export\/home\/jail\/$JAILUSER
\ncd \/export\/home\/jail\/$JAILUSER
\nmkdir etc
\nmkdir bin
\nmkdir usr
\nmkdir usr\/bin
\nmkdir -p $SDIR\/bin
\nmkdir -p $SDIR\/lib
\nmkdir -p $SDIR\/sbin
\nmkdir -p $SDIR\/etc
\nmkdir -p $SDIR\/ssl\/lib
\nmkdir -p $SDIR\/libexec
\nmkdir usr\/lib
\nmkdir usr\/platform
\nmkdir usr\/platform\/`uname -i`
\nmkdir usr\/platform\/`uname -i`\/lib
\nmkdir -p usr\/platform\/sun4u\/lib\/sparcv9
\nmkdir -p platform\/sun4u\/lib\/sparcv9
\nmkdir lib
\nmkdir dev
\nmkdir devices
\nmkdir devices\/pseudo
\ncd \/export\/home\/jail\/$JAILUSER
\nAPPS=’bin\/cp bin\/ls bin\/mkdir bin\/mv bin\/pwd bin\/rm bin\/rmdir bin\/sh’
\nfor i in $APPS; do
\ncp \/$i .\/$i
\nLIBS=`ldd .\/$i | awk ‘{print $3}’`
\nfor l in $LIBS; do
\nif [[ ! -d .\/`dirname $l` ]]; then
\nmkdir .\/`dirname $l` > \/dev\/null
\nfi
\ncp $l .$l
\ndone
\ndone
\ncd \/export\/home\/jail\/$JAILUSER\/devices\/pseudo
\nmknod mm@0:zero c 13 12
\nmknod mm@0:null c 13 2
\ncd \/export\/home\/jail\/$JAILUSER\/dev
\nln -s ..\/devices\/psuedo\/mm@0:zero zero
\nln -s ..\/devices\/pseudo\/mm@0:null null
\ncd \/export\/home\/jail\/$JAILUSER
\nBINS=”lib\/ld.so. 1 $SDIR\/bin\/ssh $SDIR\/libexec\/sftp-server $SDIR\/sbin\/sshd $SDIR\/lib\/libz.so
\n$SDIR\/lib\/libcrypto.so.0.9.8 usr\/lib\/ld.so.1 usr\/lib\/nss_files.so.1 platform\/sun4u\/lib\/libc_psr.so.1
\nplatform\/sun4u\/lib\/sparcv9\/libc_psr.so.1″
\nfor i in $BINS; do
\ncp \/$i .\/$i
\ndone
\nmkdir -p \/export\/home\/jail\/$JAILUSER\/export\/home\/$JAILUSER
\nchown $JAILUSER:$JAILGROUP \/export\/home\/jail\/$JAILUSER\/export\/home\/$JAILUSER
\ntouch \/export\/home\/jail\/$JAILUSER\/etc\/passwd
\ntouch \/export\/home\/jail\/$JAILUSER\/etc\/group
\necho “$JAILUSER:x:`\/usr\/xpg4\/bin\/id -u $JAILUSER`:`\/usr\/xpg4\/bin\/id -g
\n$JAILUSER`::\/export\/home\/$JAILUSER:\/bin\/sh” > \/export\/home\/jail\/$JAILUSER\/etc\/passwd
\n203\/433
\necho “$JAILGROUP::`\/usr\/xpg4\/bin\/id -g $JAILUSER`:$JAILUSER” > \/export\/home\/jail\/$JAILUSER\/etc\/group
\necho “done!”
\nhere
\n!
\n204\/433<\/p>\n","protected":false},"excerpt":{"rendered":"
The compiler is gcc version 3.4.5, from blastwave. Got the sources for: zlib-1.2.3 openssl-0.9.8d openssh-4.5.1 Untar them all and apply the chroot patch “openssh-4.5p1-sshjail.patch” to openssh-4.5.1 Build them in that order. To build zlib do: # .\/configure –prefix=\/opt\/acsssh –shared # make && make install To build openssl: # .\/config shared –prefix=\/opt\/acsssh # make && make […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-446","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts\/446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=446"}],"version-history":[{"count":0,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts\/446\/revisions"}],"wp:attachment":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=446"},{"taxonomy":"post_tag","embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}