RE: [Jailkit-users] What is the best solution for apps that require root to run ?

[Christoph.Ehret]

 Exactly, AIDE has to run on the real machine, i.e has to check the
entire filesystem of the machine. Is there a way that could allow me to
do this using a jailed user which could have high priviledges just to
run the aide command to check the entire filesystem of the machine?

Thanks

Chris

-----Original Message-----
From: Olivier Sessink [mailto:address@hidden 
Sent: Thursday, March 23, 2006 8:52 PM
To: Ehret Christoph, IT-SDL-SEE-HSE-LXE; address@hidden
Subject: Re: [Jailkit-users] What is the best solution for apps that
require root to run ?

Christoph Ehret wrote:
> Hi there,
> 
> I just created a jailed user who should only run a single command, but
> this command need root access to run succesfully.
> I actually want to run
> the host based IDS AIDE with that chrooted user;

but aide has to run on the real machine and not in the jail, otherwise
it cannot check any file on the real machine. Or do I misunderstand your
idea?

regards,
        Olivier