How to run a command in a chroot jail not as root and without sudo?

linux system chroot
BCS picture BCS · Sep 17, 2010 · Viewed 43.8k times · Source

I'm setting up a minimal chroot and want to avoid having sudo or su in it but still run my processes as non-root. This is a bit of a trick as running chroot requiers root. I could write a program that does this that would look something like:

uid = LookupUser(args[username])  // no /etc/passwd in jail
chroot(args[newroot])
cd("/")
setuids(uid)
execve(args[exe:])

Is that my best bet or is there a standard tool that does that for me?

I rolled my own here:

Answer

kamae picture kamae · Jul 19, 2011

If you invoke chroot from root, the chroot option --userspec=USER:GROUP will run the command under the non-root UID/GID.

By the way, the option '--userspec' is first introduced in coreutils-7.5 according to a git repository git://git.sv.gnu.org/coreutils.

Related questions

C: Run a System Command and Get Output?

Possible Duplicate: How can I run an external program from C and parse its output? I want to run a command in linux and get the text returned of what it outputs, but I do not want this text printed …

Read More
How to set system wide umask?

I am working in a lab where we are running Linux (Debian and Ubuntu). Usernames and group names are handled by NIS and yp. We have some common users that everybody has access to that run the experiments and then …

Read More
Process name from its pid in linux

How to get a process name from his pid ? For example I execute cat file1.txt, but I want to figure out that cat command and its arguments since its pid in the system. Is there a struct to determine …

Read More