[SMS]

simbad · Senior Member Joined: 30 Jun 2011 Posts: 106

how can i secure / chroot all services / http, smtp, ssh,...

gerasimos_h · Posted: Sat Oct 06, 2012 4:17 pm Post subject:

You can read "Securing and Optimizing you server"
http://sms.it-ccs.com/wiki/#LinkTarget_2290

Having all services in a chroot environment? You should better create a VM for that.

If you are really want to chroot, the easiest way (space consuming) is to extract SMS.LiveCD *.xzm modules to a directory using unsquashfs and run services from there.

If you want to strip the chroot environment install core & server packages (glibc, bash, httpd, ssh, openssl e.t.c) with e.g. installpkg -root /tmp/chroot package.txz
and look for dependencies with
chroot /tmp/chroot "ldd /usr/sbin/httpd"
and copy dependencies in /tmp/chroot

Again use a VM instead.

gerasimos_h