Server Help

all_shall_perish · Newbie Joined: Jul 26 2007 Posts: 2 Offline

i've tried chrooting asss multiple ways, both using the --chroot flag, and also just using the chroot command. if i do use the chroot command i end up getting it to chroot, but it won't daemonize as i have also passed that flag

this is what i'm trying

Doc Flabby · Posted: Sun Jul 29, 2007 5:56 am Post subject:

I would recommend not chrooting and instead running asss using an unprivelaged user.
_________________
Rediscover online gaming. Get Subspace | STF The future...prehaps

all_shall_perish · Newbie Joined: Jul 26 2007 Posts: 2 Offline

that'll work too i suppose, thanks for your help.

CypherJF · Posted: Sun Jul 29, 2007 4:55 pm Post subject:

Ew, why? I'd recommend all server software be run under specific users which don't have unauthorized access to any other part of the system... especially with asss where you have the ability to put/del/get files.
_________________
Performance is often the art of cheating carefully. - James Gosling

Dr Brain · Posted: Sun Jul 29, 2007 11:18 pm Post subject:

Problem with chrooting asss is that it's tricky to get perfect, and anything less is worthless. Chroot will only stop someone who knows exactly what they're doing from compromising a slightly insecure setup. If you've got an insecure setup, it's better to devote your time to fixing it rather than perfecting your chroot jail.
_________________
Hyperspace Owner

Smong> so long as 99% deaths feel lame it will always be hyperspace to me

Grelminar · Creator of Asss Joined: Feb 26 2003 Posts: 378 Offline

I wouldn't say it's worthless. Chroot won't solve all your problems, but it adds another layer of security, just like running as different users does. I would recommend doing both.