Firewall Handbuch für LINUX 2.0 und 2.2 - zurück

GNU utilities:
bash cat cksum comm cp csplit cut
du expand find fmt fold gawk
grep head join ln locate ls mkdir
mv nl od paste pr rm rmdir
sort split sum tac tail touch tr
unexpand uniq wc xargs
Copy all of these files into /wtree/bin
I also compiled a staticly-linked version of perl (version 5). This took a
few iterations, mostly because I dislike the 'Configure' Skript. So I
installed perl in /wtree/bin/ and the Perl libraries in
/wtree/lib/perl5/
In addition, 'date' and 'file' are useful. So I copied the HP versions of
them, and took the shared library and dynamic loader that I needed for them.
Thus on an HP system you need to copy /lib/libc.sl and /lib/dld.sl into
/wtree/lib/ For 'file' you also need 'magic', which you should put in
/wtree/etc
It is also useful to create a symbolic link from bash to 'sh' and from gawk
to 'awk' in /wtree/bin. Note: pretending that bash is 'sh' is quite
functional; however on HP-UX the 'system()' C-function wants /bin/posix/sh.
Trying to fool it with a link to bash won't work (I was compiling 'glimpse'
for our web tree, and it uses lots of inane system() calls. So I was forced
to copy /bin/posix/sh into /wtree/bin/posix/)
PLEASE NOTE: place COPIES of files in the web tree, do not use hard links!
Otherwise, why are you bothering to chroot the tree? Anyway, the web tree
should be able to live on any disk... hard links can't!
Make the /wtree/dev/null device file
Copy any needed networking files into /wtree/etc; the following should do
from your host's /etc/ tree. By all means, make these files as minimal as
possible:
hosts
resolv.conf ## the DNS resolver file
and maybe:
nsswitch.conf ## Naming Server fall-over file; useful with NIS
Now go and compile the daemon 'httpd' staticly. Also make staticly- linked
versions of cgiparse and cgiutils. Copy all of these into /wtree/bin/ Make
any additional directory structure that you will need in your web tree; for
example:
/wtree/icons
/wtree/sounds
/wtree/images
/wtree/log
(or just copy these from your existing web tree)
And of course create a directory for your cgi-bin tree, using whatever name
you have specified in the http configuration file. Copy your prepared
configuration file 'httpd.conf' into /wtree/etc/ (or whatever sub-directory
you have designated for this purpose). Also prepare and copy any other httpd
files that you will need; for example, 'passwd', 'group', 'protection' (and
copy an appropriate .www_acl file into these directories as well).
Make a chroot wrapper for your daemon, compile and install it, and update
whatever Skript will be launching it from boot up. For example, if I call my
wrapper 'httpd' and install it in /usr/local/bin, then from /etc/inittab the
Erstellt von Doc Gonzo - http://kickme.to/plugins