How to set up virtual Solaris system

[Saura]

Hi all,

I am unwilling to allow users to watch or to carry out certain files, then i can use a virtual system that allows users to see a specific file, or create another with the real contents of the file a different file.So i want to know that how can i set up virtual Solaris system. Please advice. Thanks in advance.

[Dr. V]

In fact, the so-called "virtual system", mainly the use of chroot (Change Root) to achieve, that is to change the location of the root directory, causing the system corresponds to a new system settings. To achieve this purpose, can be broadly divided into two methods, namely, amending the code, while the other is to use the command system itself to achieve. I do not intend to modify the code detailed description of the relevant part of how to do, simply, most of the major programs is the use of chroot () the C function to change the root directory of the location, where more trouble is that we may have to modify the inetd program, or other network services program. Check and reply.

[SalVatore]

The system in the / var, / usr, / etc, / dev, / devices pressed into system.tar. Check the command -

tar-xf / system.tar / vs

The information in this file will be system.tar unlock on / vs directory.
The above two lines will be able to command the system files to "/ vs" directory to go, this time when you issued a "chroot / vs / usr / bin / sh" command, it will be similar to the original system environment. In such an environment, the user does not end the current shell (chroot obtained after the shell) can not by any instructions back to the original systems. But in fact you do not need all the system files to the "virtual system", so long as the required files can be. As to what is required to file depends on what services you have installed. Listed under in the "/ vs" in the creation of FTP's "virtual system" approach. Check and reply.

[jesse]

To create a "virtual system" in the "/ etc" directory, in order to place the password and configuration files. Check the setting:

mkdir / vs / etc

Set "virtual system" in the "/ etc / inetd.conf" file.
echo "ftp stream tcp nowait root / usr / sbin / in.ftpd
in.ftpd "> / vs / etc / inetd.conf
Set "virtual system" in the "/ etc / passwd" file.
echo "root: x: 0:1: Super-User: /: / usr / bin / tcsh"> / vs / etc / passwd
echo "ftp:x:60:60:Anonymous Ftp: /: / dev / null">> / vs / etc / passwd
Set "virtual system" in the "/ etc / shadow" file.
echo "root: NP: 6445 ::::::"> / vs / etc / shadow
echo "ftp:NP:6445 ::::::">> / vs / etc / shadow

Check and reply.

[Lillebror]

To create a "virtual system" in the "/ var" directory in order to place the system programs and libraries. check the settings for this:

mkdir / vs / usr
mkdir / vs / usr / bin
mkdir / vs / usr / sbin
mkdir / vs / usr / lib

From the "/ usr / lib" copy the following file to "/ vs / usr / lib"

ld.so.1
libauth.so.1
libbsm.so.1
libc.so.1
libcmd.so.1
libcrypt_i.so.1
libdl.so.1
libgen.so.1
libmp.so.1
libmp.so.2
libnsl.so.1
libsocket.so.1
nss_files.so.1

From the "/ usr / bin" copy the following file to "/ vs / usr / bin"
# ls
From the "/ usr / sbin" copy the following file to "/ vs / usr / sbin"
# in.ftpd (FTP server program)
# inetd (Internet Super Daemon)
# "virtual system" in the "/ dev" and "/ devices" directory
As "/ dev", "/ devices" of the tar file.
tar-cf / dev.tar / dev / devices
Solution to the tar file "/ vs" directory.
tar-xf / dev.tar / vs
Remove the tar file
rm / dev.tar

Then you need to start Service.

chroot / vs / usr / sbin / inetd-s

This step should be noted that whether the closure of the original system inetd.conf for ftp option, otherwise it is impossible to start normally.

[Calvin K]

FTP services, if vulnerabilities could enable an intruder to obtain root privileges through the holes, this time anonymous ftp to chroot may not be executed, if no implementation of the chroot, then the entire system is exposed to intruders eyes, but if you do a virtual system, will be mandatory for users to connect when the virtual system, even if an intruder to obtain root privileges through the holes will also be restricted to a virtual system, will be difficult to upset the system, so system damage can be reduced. All the best.