1. Forum
  2. FidoNet
  3. MYSTIC

  • Re: Tips and pointers to run Mystic under a GNU/Linux chroot

    From robert wolfe@1:116/18 to Michael Balcos on Sun Jul 16 21:44:00 2017
    On 07-85-39, Michael Balcos said...

    Hi,

    I'd like to know if you have any tips and pointers on how to run Mystic in GNU/Linux chroot jail? :) I'd like to do this to increase security.

    Why not run is as its own user?

    --- Mystic BBS v1.05/OS2
    * Origin: Neptune's Lair/2 * Olive Branch MS * os2bbs.org (1:116/18)
  • From mark lewis@1:3634/12.73 to robert wolfe on Mon Jul 17 08:20:12 2017

    On 2017 Jul 16 21:44:00, you wrote to Michael Balcos:

    I'd like to know if you have any tips and pointers on how to run
    Mystic in GNU/Linux chroot jail? :) I'd like to do this to increase
    security.

    Why not run is as its own user?

    there's still a possible security threat... consider if someone figures out how
    to get to the command prompt and then shovels a priv escalation hack which gives them root privs? they have the whole machine... do that in a chroot and what do they have?

    )\/(ark

    Always Mount a Scratch Monkey
    Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
    ... Chocolate, chocolate, my kingdom for a chocolate
    ---
    * Origin: (1:3634/12.73)
  • From Michael Balcos@3:772/500 to robert wolfe on Fri Jul 21 10:26:16 2017
    Hi Robert,

    On 07/16/17, robert wolfe said the following...
    On 07-85-39, Michael Balcos said...
    I'd like to know if you have any tips and pointers on how to run Mysti GNU/Linux chroot jail? :) I'd like to do this to increase security.

    Why not run is as its own user?

    I'm currently running Mystic as its own user. chrooting Mystic will make me feel more secure just in case Mystic suddenly stops and gives shell access to an attacker.

    --- Mystic BBS v1.12 A34 (Linux/64)
    * Origin: A 90's Manila BBS telnet://a90smanilabbs.ddns.net (3:772/500)