On Sat, Oct 18 '03 at 14:37, Henrik Nordstrom wrote:
> > It would be nice if a chroot wrapper could open the files and pass the 
> > "filemap=" config strings to your config parser.  Something like this:
> 
> What I do not quite get in this discussion is why one does not want to
> have the selected files available in the chroot in the first place?
> 
> To chroot you need to be root. As root you are also allowed to map files
> around using mount --bind.
No, there is no need to be root inside a chrooted environment, or better
yet you should not be.

I've created a patch to su (from coreutils) to allow root to chroot into
a given directory, than su to a user, and execute a binary (attached).

My uml setup for an uml instance includeds a /bin/ directory for each
user with one copy of the uml instance, the commandline than looks like
this

su -r /home/uml/utest utest -s /bin/utest  umid=utest ...

where utest is a user on the host.
-- 
/"\ Goetz Bock at blacknet dot de  --  secure mobile Linux everNETting
\ /                     (c) 2003 as GNU FDL 1.1
 X   [ 1. Use descriptive subjects - 2. Edit a reply for brevity -  ]
/ \  [ 3. Reply to the list - 4. Read the archive *before* you post ]