added notes and nase dir chroot reference script
This commit is contained in:
parent
fabd9093c0
commit
4f79a59b64
@ -0,0 +1,59 @@
|
||||
#!/bin/bash
|
||||
#more info here http://www.cyberciti.biz/faq/debian-ubuntu-restricting-ssh-user-session-to-a-directory-chrooted-jail/
|
||||
|
||||
fs="$PWD/jail"
|
||||
echo "Creating ${fs}..."
|
||||
mkdir -p ${fs}/{etc,usr/{bin,lib},bin,lib}/
|
||||
|
||||
mkdir -p $fs/dev/
|
||||
mknod -m 666 $fs/dev/null c 1 3
|
||||
mknod -m 666 $fs/dev/tty c 5 0
|
||||
mknod -m 666 $fs/dev/zero c 1 5
|
||||
mknod -m 666 $fs/dev/random c 1 8
|
||||
|
||||
cp -v /lib/ld-linux.so.2 $fs/lib/
|
||||
|
||||
chown root:root $fs
|
||||
chmod 0755 $fs
|
||||
|
||||
wget "http://www.busybox.net/downloads/binaries/latest/busybox-i686" -O ${fs}/bin/busybox
|
||||
chmod +x ${fs}/bin/busybox
|
||||
|
||||
cd ${fs}/bin
|
||||
./busybox --help | \
|
||||
sed -e '1,/^Currently defined functions:/d' \
|
||||
-e 's/[ \t]//g' -e 's/,$//' -e 's/,/\n/g' | \
|
||||
while read app ; do
|
||||
if [ "$app" != "" ]; then
|
||||
printf "linking %-12s ...\n" "$app"
|
||||
ln -sf "./busybox" "$app"
|
||||
ls -ld "$app"
|
||||
fi
|
||||
done
|
||||
|
||||
echo "nameserver 8.8.8.8" > $fs/etc/resolv.conf
|
||||
echo "search 8.8.8.8" >> $fs/etc/resolv.conf
|
||||
|
||||
#add nmap
|
||||
cp -v /usr/bin/nmap $fs/usr/bin/nmap_real
|
||||
#create unprivileged nmap script
|
||||
cat << EOF > $fs/usr/bin/nmap
|
||||
#!/bin/sh
|
||||
nmap_real --unprivileged \$*
|
||||
EOF
|
||||
chmod +x $fs/usr/bin/nmap
|
||||
|
||||
mkdir -p $fs/{usr/share/nmap/,etc/services}
|
||||
#cp -vr /usr/share/nmap $fs/usr/share/nmap/
|
||||
ldd /usr/bin/nmap|while read line;
|
||||
do
|
||||
echo "$line"|\
|
||||
awk '{print $3}'
|
||||
done|grep lib|while read line;
|
||||
do
|
||||
cp -v "$line" $fs/usr/lib/;
|
||||
done
|
||||
|
||||
clear
|
||||
echo "welcome to your chroot!"
|
||||
chroot $fs sh
|
2
src/NOTES/Notes.txt
Normal file
2
src/NOTES/Notes.txt
Normal file
@ -0,0 +1,2 @@
|
||||
# Note: Very good breakdown of an LFS setup. His directory script is interesting too. Just a good source all around.
|
||||
https://www.youtube.com/watch?v=IXA0GNTLf_Q&list=PLHh55M_Kq4OAPznDEcgnkQsbjgvG-QFBR
|
Loading…
Reference in New Issue
Block a user