RE: [Jailkit-users] issue with jk_jailuser on Mandriva 2006

[Steve Wegner]

Olivier, 

I re-ran the strace just to make sure (as noted from you how to under
the advanced section)

in one terminal I do:

address@hidden ~]$ ssh address@hidden
address@hidden's password: 

Then in other terminal I do:

address@hidden me]# ps axu|grep sshd|grep test
root     22724  0.5  0.0   5664  1788 ?        Ss   21:21   0:00 sshd:
test [priv]
sshd     22725  0.0  0.0   5664  1832 ?        S    21:21   0:00 sshd:
test [net] 

address@hidden me]# strace -p 22724 -ff -e trace=file -o /tmp/tracefile2
Process 22724 attached - interrupt to quit

Then in first terminal I enter users password

Then in second terminal I see:

Process 22731 attached
Process 22732 attached
Process 22732 detached
Process 22731 detached
Process 22724 detached
address@hidden me]# 

Then I look in /tmp/  and I see 3 files:
tracefile2
tracefile2.22731
tracefile2.22732

The are shown below, in the order listed, in their entirety.

results:

tracefile2

open("/etc/shadow", O_RDONLY)           = 4
open("/etc/shadow", O_RDONLY)           = 4
open("/etc/localtime", O_RDONLY)        = 4
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0
--- SIGCHLD (Child exited) @ 0 (0) ---
open("/dev/ptmx", O_RDWR)               = 4
statfs("/dev/pts", {f_type="DEVPTS_SUPER_MAGIC", f_bsize=4096,
f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0},
f_namelen=255, f_frsize=4096}) = 0
stat64("/dev/pts/4", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4),
...}) = 0
statfs("/dev/pts/4", {f_type="DEVPTS_SUPER_MAGIC", f_bsize=4096,
f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0},
f_namelen=255, f_frsize=4096}) = 0
stat64("/dev/pts/4", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4),
...}) = 0
open("/dev/pts/4", O_RDWR|O_NOCTTY)     = 6
readlink("/proc/self/fd/6", "/dev/pts/4", 4095) = 10
open("/etc/group", O_RDONLY)            = 7
stat64("/dev/pts/4", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4),
...}) = 0
chown32("/dev/pts/4", 512, 5)           = 0
open("/etc/passwd", O_RDONLY)           = 7
stat64("/var/log/lastlog", {st_mode=S_IFREG|0600, st_size=2336292, ...})
= 0
open("/var/log/lastlog", O_RDONLY|O_LARGEFILE) = 7
open("/etc/passwd", O_RDONLY)           = 7
readlink("/proc/self/fd/0", "/dev/pts/4", 4127) = 10
access("/var/run/utmpx", F_OK)          = -1 ENOENT (No such file or
directory)
open("/var/run/utmp", O_RDWR)           = 7
access("/var/log/wtmpx", F_OK)          = -1 ENOENT (No such file or
directory)
open("/var/log/wtmp", O_WRONLY)         = 7
stat64("/var/log/lastlog", {st_mode=S_IFREG|0600, st_size=2336292, ...})
= 0
open("/var/log/lastlog", O_RDWR|O_CREAT|O_LARGEFILE, 0600) = 7
open("/dev/null", O_RDONLY|O_LARGEFILE) = 0
open("/etc/passwd", O_RDONLY)           = 6
access("/var/run/utmpx", F_OK)          = -1 ENOENT (No such file or
directory)
open("/var/run/utmp", O_RDWR)           = 6
--- SIGCHLD (Child exited) @ 0 (0) ---
access("/var/log/wtmpx", F_OK)          = -1 ENOENT (No such file or
directory)
open("/var/log/wtmp", O_WRONLY)         = 6
chown32("/dev/pts/4", 0, 0)             = 0
chmod("/dev/pts/4", 0666)               = 0


tracefile2.22731

open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 5
open("/etc/group", O_RDONLY)            = 5
open("/etc/ld.so.cache", O_RDONLY)      = 5
open("/lib/libnss_nisplus.so.2", O_RDONLY) = 5
open("/var/nis/NIS_COLD_START", O_RDONLY) = -1 ENOENT (No such file or
directory)
--- SIGCHLD (Child exited) @ 0 (0) ---


tracefile2.22732

open("/dev/tty", O_RDWR|O_NOCTTY|O_LARGEFILE) = -1 ENXIO (No such device
or address)
open("/dev/tty", O_RDWR|O_NOCTTY|O_LARGEFILE) = -1 ENXIO (No such device
or address)
open("/dev/pts/4", O_RDWR|O_LARGEFILE)  = 7
open("/dev/tty", O_WRONLY|O_LARGEFILE)  = 8
stat64("/var/sftproot/./home/test/.hushlogin", 0xbfda77c4) = -1 ENOENT
(No such file or directory)
open("/etc/nologin", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
stat64("/var/sftproot/./home/test/.hushlogin", 0xbfda6414) = -1 ENOENT
(No such file or directory)
chdir("/var/sftproot/./home/test")      = 0
stat64(".ssh/rc", 0xbfda74bc)           = -1 ENOENT (No such file or
directory)
stat64("/etc/ssh/sshrc", 0xbfda74bc)    = -1 ENOENT (No such file or
directory)
execve("/usr/sbin/jk_chrootsh", ["-jk_chrootsh"], [/* 10 vars */]) = 0
access("/etc/suid-debug", F_OK)         = -1 ENOENT (No such file or
directory)
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
open("/lib/tls/libc.so.6", O_RDONLY)    = 3
open("/etc/nsswitch.conf", O_RDONLY)    = 3
open("/etc/ld.so.cache", O_RDONLY)      = 3
open("/lib/libnss_files.so.2", O_RDONLY) = 3
open("/etc/passwd", O_RDONLY)           = 3
open("/etc/group", O_RDONLY)            = 3
open("/etc/jailkit/jk_chrootsh.ini", O_RDONLY) = 3
chdir("/var/sftproot")                  = 0
getcwd("/var/sftproot", 255)            = 14
lstat64("/var/sftproot", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lstat64("/var/sftproot/./home/test", {st_mode=S_IFDIR|0755,
st_size=4096, ...}) = 0
open("/etc/localtime", O_RDONLY)        = 4
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0
chroot("/var/sftproot")                 = 0
open("/etc/passwd", O_RDONLY)           = 5
open("/etc/group", O_RDONLY)            = 5
lstat64("/usr/sbin/jk_lsh", {st_mode=S_IFREG|0755, st_size=10984, ...})
= 0
chdir("/home/test")                     = 0
execve("/usr/sbin/jk_lsh", ["/usr/sbin/jk_lsh"], [/* 7 vars */]) = 0
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY)      = 4
open("/lib/tls/libc.so.6", O_RDONLY)    = 4
open("/etc/localtime", O_RDONLY)        = -1 ENOENT (No such file or
directory)
open("/etc/localtime", O_RDONLY)        = -1 ENOENT (No such file or
directory)
open("/etc/localtime", O_RDONLY)        = -1 ENOENT (No such file or
directory)
open("/etc/localtime", O_RDONLY)        = -1 ENOENT (No such file or
directory)
open("/etc/nsswitch.conf", O_RDONLY)    = 5
open("/etc/ld.so.cache", O_RDONLY)      = 5
open("/lib/libnss_files.so.2", O_RDONLY) = 5
open("/etc/group", O_RDONLY)            = 5
open("/etc/passwd", O_RDONLY)           = 5
open("/etc/localtime", O_RDONLY)        = -1 ENOENT (No such file or
directory)
open("/etc/localtime", O_RDONLY)        = -1 ENOENT (No such file or
directory)
open("/etc/localtime", O_RDONLY)        = -1 ENOENT (No such file or
directory)

 
_____________________________________________________________________


Steve Wegner wrote:
> OK here we go:
> 
> I did this and got 3 files, each are below.
> 
> Tracefile
> Tracefile.20142
> tracefile20143
[..]

here jk_lsh is started by jk_chrootsh:

> execve("/usr/sbin/jk_lsh", ["/usr/sbin/jk_lsh"], [/* 7 vars */]) = 0

> directory)

and there is nothing more? in your previous emails you show that there
is at least some logging happening (there was a jk_lsh log message), I
don't see this in the trace. Is it possible that the trace was actually
longer?

regards,
        Olivier


_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users