Re: [IBMiOSS] the case for chroot

[Jack Woehr <jwoehr@xxxxxxxxxxxxx>]

Aaron Bartell wrote:
> If I run "$ chroot /home/aaron/c1 /usr/bin/sh" I will
> change my perceived root directory to be /home/aaron/c1, except at that
> point my current shell (/usr/bin/sh) doesn't know it's in a chroot
> environment because if I do "$ ls /" it will display the contents of
> /home/aaron/c1 because it thinks that's the actual root.
OpenBSD's http server is configured by default to run in such an environment so that if a hacker comes in
through a weakness in user webbage or Apache code all they can see is sterile chroot environment the web server
runs in. OpenBSD admins often run other apps, e.g., Tor or News in chroot "jails".