openssh unix dev - Aug 2002 - Further comment on chroot patch for openssh-3.4p1

The way this was last supplied to this list (2002-07-13) has the chroot
after the call to 'setpcred'.  In AIX 4.3.3 the call to setpcred changes
the uid and eff. uid to the user attempting to logon.  Then the call to
chroot( new_home ) fails because AIX requires that any user issuing
the chroot subroutine be at root authority.
Net result: attempting to do a chroot after the call to setpcred fails.

I tried moving the setpcred after the chroot code but ran into other 
problems which I am not prepared to attempt to address.  This email
is only for information for anybody trying to get chroot on openssh to
work.

If the people who might be working on the chroot capability of openssh
come up with any revisions I would probably be available to test them.
===================================================Kent Wick,  TxMHMR, 
Unix/Network Systems Programmer
Email:  kent.wick at mhmr.state.tx.us
Phone:  (512) 206-5931   Fax:  (512) 206-4838
Snail mail:  PO Box 12668, Austin, Tx 78711-2668

Please check out the current snapshots.  I believe this has all been
resolved at least a month ago.

http://www.openssh.com/portable.html, pick your favorate mirror, select
'snapshots'  and pick someone close to today's date.

- Ben

On Tue, 13 Aug 2002, Wick, Kent wrote:
> The way this was last supplied to this list (2002-07-13) has the chroot
> after the call to 'setpcred'.  In AIX 4.3.3 the call to setpcred
changes
> the uid and eff. uid to the user attempting to logon.  Then the call to
> chroot( new_home ) fails because AIX requires that any user issuing
> the chroot subroutine be at root authority.
> Net result: attempting to do a chroot after the call to setpcred fails.
>
> I tried moving the setpcred after the chroot code but ran into other
> problems which I am not prepared to attempt to address.  This email
> is only for information for anybody trying to get chroot on openssh to
> work.
>
> If the people who might be working on the chroot capability of openssh
> come up with any revisions I would probably be available to test them.
> ===================================================> Kent Wick,  TxMHMR,
Unix/Network Systems Programmer
> Email:  kent.wick at mhmr.state.tx.us
> Phone:  (512) 206-5931   Fax:  (512) 206-4838
> Snail mail:  PO Box 12668, Austin, Tx 78711-2668
>
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
>