Hmm. I don't think that we are behind any firewalls. Just tcp-wrappers,
which has been there for years.
I'll post a copy of the reply I sent privately:
Hi,
Thanks for the suggestion. I think that you may have come close to
hitting the nail on the head. From the commands I have run, I still can't
see the forest for the trees, but you might have an idea.
I'll show you the record of my tries, ending with the output of 'truss',
and then a directory listing of /home/ftp.
Sure enough, chroot doesn't want to work, as in:
#
# chroot ~ftp ~ftp/usr/bin/ls -l
chroot: No such file or directory
#
# chroot ~ftp /usr/bin/ls
ld.so.1: /usr/bin/ls: fatal: /dev/zero: open failed: No such device or
address
Killed
#
# cd ~ftp
# pwd
/home/ftp
# ls
total 225952
2 dr-xr-xr-x 6 root staff 512 Nov 13 13:18 ./
4 drwxr-xr-x 65 root root 1536 Oct 25 09:47 ../
2 lrwxrwxrwx 1 root other 7 Nov 9 16:35 bin -> usr/bin/
2 dr-xr-xr-x 2 root staff 512 Nov 9 16:35 dev/
2 dr-xr-xr-x 3 root staff 512 Oct 30 17:10 etc/
2 dr-xr-xr-x 17 ftp staff 512 Oct 24 11:31 pub/
225936 -rw-r--r-- 1 root other 115608576 Oct 30 17:09 pub.tar
2 dr-xr-xr-x 5 root staff 512 Feb 26 1996 usr/
#
# cd ~ftp/usr/bin
# ls
total 40
2 dr-xr-xr-x 2 root staff 512 Nov 13 12:57 ./
2 dr-xr-xr-x 5 root staff 512 Feb 26 1996 ../
36 ---x--x--x 1 root other 18120 Nov 13 12:57 ls*
#
#
# ~ftp/usr/bin/ls -l
total 36
---x--x--x 1 root other 18120 Nov 13 12:57 ls
#
chroot: No such file or directory
chroot: No such file or directory
------------------------------------------
# truss -aef chroot ~ftp ~ftp/usr/bin/ls -l >> chroot.txt
5887: execve("/usr/sbin/chroot", 0xEFFFF4D4, 0xEFFFF4E8) argc = 4
5887: argv: chroot /home/ftp /home/ftp/usr/bin/ls -l
5887: envp: HOME=/home/hlepar
5887:
PATH=/usr/openwin/bin:/usr/openwin/demo:/sbin:/usr/sbin:/usr/bin:/etc:/usr/ccs/bin:/usr/ccs/lib:/opt/SUNWspro/bin:/usr/ucb:/usr/local/bin:/opt/local/netpbm:/home/hlepar/bin:/opt/local/saord/saord/bin.sun4-sol26:/opt/local/Staroffice/bin:/usr/java1.2/bin:.
5887: LOGNAME=hlepar HZ=100 TERM=xterm TZ=Canada/Eastern
5887: SHELL=/bin/tcsh MAIL=/var/mail/hlepar LC_COLLATE=en_CA
5887: LC_CTYPE=en_CA LC_MESSAGES=C LC_MONETARY=en_CA
5887: LC_NUMERIC=en_CA LC_TIME=en_CA DISPLAY=jupiter.astro.uwo.ca:0
5887: PRINTER=tek SHLVL=2 PWD=/home/hlepar USER=hlepar
5887: HOST=phobos.astro.uwo.ca HOSTTYPE=sun4
5887: CADCHOME=/usr/local/cadc MOZILLA_HOME=/usr/local/netscape
5887:
HELPPATH=/usr/openwin/lib/help/handbooks:/usr/local/info:/usr/local/lib
5887: TMPDIR=/tmp GR_PS_PRSTR=lpr -Pps -h
5887: GR_HOME=/usr/local/lib/xmgr iraf=/iraf/iraf/
5887: IRAFHOME=/home/hlepar/iraf TAPE=/dev/rmt/0mn
5887: WWW_HOME=http://phobos.astro.uwo.ca/index.html
5887: GS_LIB=/usr/local/share/ghostscript/6.0
5887:
GS_FONTPATH=/usr/local/share/ghostscript/fonts:/usr/openwin/lib/X11/fonts/Type1
5887: TETEXDIR=/usr/local/lib/teTeX PGPLOT_DIR=/opt/local/pgplot
5887: LESS=-X LPDEST=tek EDITOR=emacs VISUAL=emacs PAGER=less
5887: OPENWINHOME=/usr/openwin HELPDIR=/usr/openwin/lib/help
5887:
MANPATH=/opt/SUNWspro/man:/usr/openwin/share/man:/home/hlepar/man:/usr/man:/usr/local/man
5887: PROCDIR=/home/hlepar/proc SWHOME=/opt/SUNWspro/SW3.0
5887:
XFILESEARCHPATH=/usr/local/lib/X11/app-defaults/%N%S:/usr/openwin/lib/%N%S:/usr/lib/X11/app-defaults/%N%S:/usr/tftpboot/usr/lib/X11/ncd/%N%S
5887: IRAFARCH=ssun ccdctl=/home/hlepar/local/iraf/ccdctl/
5887: CCDCTL=/home/hlepar/local/iraf/ccdctl
5887: XAPPHOT=/logan/hlepar/x11iraf/examples/xapphot/
5887: XEXAMP=/logan/hlepar/x11iraf/examples/
5887: MOTD=/usr/local/etc/motd
5887:
TERMCAP=x1|xterm|vs100:AL=\E[%dL:DC=\E[%dP:DL=\E[%dM:DO=\E[%dB:IC=\E[%d@:UP=\E[%dA:al=\E[L:am:bs:cd=\E[J:ce=\E[K:cl=\E[H\E[2J:cm=\E[%i%d;%dH:co#80:cs=\E[%i%d;%dr:ct=\E[3k:dc=\E[P:dl=\E[M:im=\E[4h:ei=\E[4l:mi:ho=\E[H:is=\E[r\E[m\E[2J\E[H\E[?7h\E[?1;3;4;6l\E[4l:rs=\E[r\E[m\E[2J\E[H\E[?7h\E[?1;3;4;6l\E[4l\E<:k1=\EOP:k2=\EOQ:k3=\EOR:k4=\EOS:kb=^H:kd=\EOB:ke=\E[?1l\E>:kl=\EOD:km:kn#4:kr=\EOC:ks=\E[?1h\
5887: PS1=#
5887:
LD_LIBRARY_PATH=/opt/SUNWspro/lib:/usr/openwin/lib:/opt/SUNWspro/SW3.0/lib:/opt/local/lib:/opt/local/lib/X11:/usr/ucblib:/opt/SUNWits/Graphics-sw/xil/lib:/opt/local/midas/98NOV/lib
5887: stat("/usr/sbin/chroot", 0xEFFFF1D0) = 0
5887: open("/var/ld/ld.config", O_RDONLY) Err#2 ENOENT
5887: open("/opt/SUNWspro/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/usr/openwin/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/SUNWspro/SW3.0/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/local/lib/X11/libc.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/usr/ucblib/libc.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/SUNWits/Graphics-sw/xil/lib/libc.so.1", O_RDONLY) Err#2
ENOENT
5887: open("/opt/local/midas/98NOV/lib/libc.so.1", O_RDONLY) Err#2
ENOENT
5887: open("/usr/lib/libc.so.1", O_RDONLY) = 3
5887: fstat(3, 0xEFFFEF6C) = 0
5887: mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =
0xEF7B0000
5887: mmap(0x00000000, 704512, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =
0xEF700000
5887: mmap(0xEF7A2000, 28504, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED, 3, 598016) = 0xEF7A2000
5887: open("/dev/zero", O_RDONLY) = 4
5887: mmap(0xEF7AA000, 2664, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xEF7AA000
5887: munmap(0xEF794000, 57344) = 0
5887: memcntl(0xEF700000, 101580, MC_ADVISE, 0x0003, 0, 0) = 0
5887: close(3) = 0
5887: open("/opt/SUNWspro/lib/libdl.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/usr/openwin/lib/libdl.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/SUNWspro/SW3.0/lib/libdl.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/local/lib/libdl.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/local/lib/X11/libdl.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/usr/ucblib/libdl.so.1", O_RDONLY) Err#2 ENOENT
5887: open("/opt/SUNWits/Graphics-sw/xil/lib/libdl.so.1", O_RDONLY)
Err#2 ENOENT
5887: open("/opt/local/midas/98NOV/lib/libdl.so.1", O_RDONLY) Err#2
ENOENT
5887: open("/usr/lib/libdl.so.1", O_RDONLY) = 3
5887: fstat(3, 0xEFFFEF6C) = 0
5887: mmap(0xEF7B0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED,
3, 0) = 0xEF7B0000
5887: close(3) = 0
5887: open("/usr/platform/SUNW,Ultra-4/lib/libc_psr.so.1", O_RDONLY) = 3
5887: fstat(3, 0xEFFFEDD4) = 0
5887: mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =
0xEF6F0000
5887: mmap(0x00000000, 16384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =
0xEF6E0000
5887: close(3) = 0
5887: close(4) = 0
5887: munmap(0xEF6F0000, 8192) = 0
5887: getuid() = 0 [0]
5887: chroot("/home/ftp") = 0
5887: chdir("/") = 0
5887: execve("/home/ftp/usr/bin/ls", 0xEFFFF4E4, 0xEFFFF4F0) Err#2
ENOENT
5887: ioctl(1, TCGETA, 0xEFFFE554) Err#25 ENOTTY
5887: fstat64(1, 0xEFFFE5C8) = 0
5887: brk(0x00020FA8) = 0
5887: brk(0x00024FA8) = 0
5887: llseek(0, 0, SEEK_CUR) = 19360
5887: write(1, " c h r o o t : N o s".., 34) = 34
5887: _exit(1)
.:
total 225952
dr-xr-xr-x 6 root staff 512 Nov 13 13:13 .
drwxr-xr-x 65 root root 1536 Oct 25 09:47 ..
lrwxrwxrwx 1 root other 7 Nov 9 16:35 bin -> usr/bin
dr-xr-xr-x 2 root staff 512 Nov 9 16:35 dev
dr-xr-xr-x 3 root staff 512 Oct 30 17:10 etc
-rw-r--r-- 1 root other 0 Nov 13 13:13 listing.txt
dr-xr-xr-x 17 ftp staff 512 Oct 24 11:31 pub
-rw-r--r-- 1 root other 115608576 Oct 30 17:09 pub.tar
dr-xr-xr-x 5 root staff 512 Feb 26 1996 usr
./dev:
total 4
dr-xr-xr-x 2 root staff 512 Nov 9 16:35 .
dr-xr-xr-x 6 root staff 512 Nov 13 13:13 ..
crw-rw-rw- 1 root other 11, 42 Nov 9 16:35 tcp
crw-rw-rw- 1 root other 105, 2 Nov 9 16:35 ticlts
crw-rw-rw- 1 root other 105, 1 Nov 9 16:35 ticotsord
crw-rw-rw- 1 root other 11, 41 Nov 9 16:35 udp
crw-rw-rw- 1 root other 13, 12 Nov 9 16:35 zero
./etc:
total 28
dr-xr-xr-x 3 root staff 512 Oct 30 17:10 .
dr-xr-xr-x 6 root staff 512 Nov 13 13:13 ..
dr-xr-xr-x 2 root other 512 Oct 30 17:10 default
-r--r--r-- 1 root staff 292 Nov 9 16:35 group
-r--r--r-- 1 root staff 1064 Nov 9 16:35 netconfig
-r--r--r-- 1 root staff 3749 Nov 9 16:35 passwd
-r--r--r-- 1 root other 3749 Oct 30 16:21 passwd~
./etc/default:
total 6
dr-xr-xr-x 2 root other 512 Oct 30 17:10 .
dr-xr-xr-x 3 root staff 512 Oct 30 17:10 ..
-r--r--r-- 1 root other 561 Nov 9 16:35 init
./pub:
total 23348
dr-xr-xr-x 17 ftp staff 512 Oct 24 11:31 .
dr-xr-xr-x 6 root staff 512 Nov 13 13:13 ..
drwxr-xr-x 2 abrooks staff 512 Apr 18 2001 abrooks
drwxr-xr-x 2 afwehlau staff 512 Aug 22 1996 afwehlau
drwxr-xr-x 2 asigut staff 512 Nov 5 1999 asigut
drwxr-xr-x 2 root staff 512 Oct 22 1996 ccd
drwxr-xr-x 2 1069 staff 512 Dec 11 2000 couchman
drwxr-xr-x 2 curry staff 512 Jan 9 2001 curry
...
read more »