toad.social

Verfassungklage@troet.cafe<a href="https://troet.cafe/tags/Root" class="mention hashtag" rel="nofollow noopener" target="_blank">#Root</a>-Zugriff für alle: <a href="https://troet.cafe/tags/Kritische" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kritische</a> <a href="https://troet.cafe/tags/Sudo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sudo</a>-Lücke gefährdet unzählige <a href="https://troet.cafe/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>-Systeme<a href="https://troet.cafe/tags/Forscher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Forscher</a> haben eine gefährliche <a href="https://troet.cafe/tags/Sicherheitsl%C3%BCcke" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheitslücke</a> im <a href="https://troet.cafe/tags/Kommandozeilentool" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kommandozeilentool</a> <a href="https://troet.cafe/tags/Sudo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sudo</a> entdeckt. Angreifer können mit wenig Aufwand Root-Rechte erlangen.Die <a href="https://troet.cafe/tags/Sicherheitsl%C3%BCcke" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheitslücke</a> besteht laut Blogbeitrag der <a href="https://troet.cafe/tags/Forscher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Forscher</a> seit der im Juni 2023 veröffentlichten <a href="https://troet.cafe/tags/Sudo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sudo</a>-Version 1.9.14 – und damit seit rund zwei Jahren. Ursache ist wohl ein Fehler in der <a href="https://troet.cafe/tags/Chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chroot</a>- <a href="https://troet.cafe/tags/Implementierung" class="mention hashtag" rel="nofollow noopener" target="_blank">#Implementierung</a>. <a href="https://www.golem.de/news/root-zugriff-fuer-alle-kritische-sudo-luecke-gefaehrdet-unzaehlige-linux-systeme-2507-197635.html" rel="nofollow noopener" translate="no" target="_blank">https://www.golem.de/news/root-zugriff-fuer-alle-kritische-sudo-luecke-gefaehrdet-unzaehlige-linux-systeme-2507-197635.html</a>

r1w1s1I wrote a simple shell script to manage a Slackware chroot environment for building packages. Tested with Slackware-current. You can create and access the chroot easily with just a few commands. Source: <a href="https://git.sr.ht/~r1w1s1/slackbuilds/blob/main/chroot-manager.sh" rel="nofollow noopener" target="_blank">https://git.sr.ht/~r1w1s1/slackbuilds/blob/main/chroot-manager.sh</a> <a href="https://snac.bsd.cafe?t=slackware" class="mention hashtag" rel="nofollow noopener" target="_blank">#slackware</a> <a href="https://snac.bsd.cafe?t=shellscript" class="mention hashtag" rel="nofollow noopener" target="_blank">#shellscript</a> <a href="https://snac.bsd.cafe?t=chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> <a href="https://snac.bsd.cafe?t=linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>

Victoria Stuart 🇨🇦 🏳️‍⚧️Linux superusers: chroot Technique - Linux Swiss army multi-tool <a href="https://livesys.se/posts/the-chroot-technique/" rel="nofollow noopener" translate="no" target="_blank">https://livesys.se/posts/the-chroot-technique/</a> <a href="https://news.ycombinator.com/item?id=43632379" rel="nofollow noopener" translate="no" target="_blank">https://news.ycombinator.com/item?id=43632379</a><a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://mastodon.social/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> <a href="https://mastodon.social/tags/BootProcess" class="mention hashtag" rel="nofollow noopener" target="_blank">#BootProcess</a> <a href="https://mastodon.social/tags/RescueDisk" class="mention hashtag" rel="nofollow noopener" target="_blank">#RescueDisk</a> <a href="https://mastodon.social/tags/SystemRecovery" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemRecovery</a>

mirabilos<a href="https://mastodon.infra.de/@galaxis" class="u-url mention" rel="nofollow noopener" target="_blank">@galaxis</a> you might like <a href="https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=shellsnippets/shellsnippets.git;a=blob;f=posix/sysadmin/debchroot.sh;hb=HEAD" rel="nofollow noopener" target="_blank">https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=shellsnippets/shellsnippets.git;a=blob;f=posix/sysadmin/debchroot.sh;hb=HEAD</a> to take care of the <a href="https://toot.mirbsd.org/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> mount dance and perhaps even the <a href="https://toot.mirbsd.org/tags/ipv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a> support for <a href="https://toot.mirbsd.org/tags/initramfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#initramfs</a> unlocking from <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627164#14" rel="nofollow noopener" target="_blank">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627164#14</a> (which gets around issues with some IPv4 configs where the gateway is out of the subnet). HTH & HAND

Linux TLDRAtoms is a Linux Chroot Management Tool with a User-Friendly GUI <a href="https://noc.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://noc.social/tags/Atoms" class="mention hashtag" rel="nofollow noopener" target="_blank">#Atoms</a> <a href="https://noc.social/tags/Chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chroot</a> <a href="https://noc.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> <a href="https://noc.social/tags/Ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ubuntu</a> <a href="https://linuxtldr.com/atoms-tool/" rel="nofollow noopener" target="_blank">https://linuxtldr.com/atoms-tool/</a>

Kevin Karhan :verified:<a href="https://hackers.town/@calcifer" class="u-url mention" rel="nofollow noopener" target="_blank">@calcifer</a> personally, I want really simple applications that have all their dependencies statically.compiled into them and run under their own "username" to enshure encapsulation and isolation...<ul><li>is that <a href="https://infosec.space/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> <a href="https://infosec.space/tags/jails" class="mention hashtag" rel="nofollow noopener" target="_blank">#jails</a> / <a href="https://infosec.space/tags/bhyve" class="mention hashtag" rel="nofollow noopener" target="_blank">#bhyve</a> but worse?</li></ul>

Josh Braun<a href="https://toot.liw.fi/@liw" class="u-url mention" rel="nofollow noopener" target="_blank">@liw</a> <a href="https://fediscience.org/@martinvermeer" class="u-url mention" rel="nofollow noopener" target="_blank">@martinvermeer</a> Yeah, given the number of times my Linux machine has refused to boot properly after an update, I’m not exactly crowing about this. 😂 <a href="https://sciences.social/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a>

scyTIL about <a href="https://chaos.social/tags/systemd" class="mention hashtag" rel="nofollow noopener" target="_blank">#systemd</a>'s TemporaryFileSystem, ProtectSystem, ProtectHome, InaccessiblePaths, ReadOnlyPaths and a bunch more related options, which allow you to easily set up a <a href="https://chaos.social/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> style environment for a service, simply by defining what directories it should have access to right there in the unit file.Depending on what you need, you can use an allowlist-based approach using TemporaryFileSystem & ReadWritePaths, or a blocklist-based one with InaccessiblePaths.<a href="https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html" rel="nofollow noopener" translate="no" target="_blank">https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html</a><a href="https://chaos.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>

ricardo :mastodon:<a href="https://fosstodon.org/tags/Chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chroot</a> <a href="https://fosstodon.org/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> command with examples <a href="https://www.rosehosting.com/blog/chroot-linux-commands/" rel="nofollow noopener" translate="no" target="_blank">https://www.rosehosting.com/blog/chroot-linux-commands/</a>

gyptazyYou can find some newer packages for <a href="https://gyptazy.ch/snac?t=debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#Debian</a> <a href="https://gyptazy.ch/snac?t=bookworm" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bookworm</a> (which is used by the <a href="https://gyptazy.ch/snac?t=visionfive" class="mention hashtag" rel="nofollow noopener" target="_blank">#VisionFive</a> <a href="https://gyptazy.ch/snac?t=visionfive2" class="mention hashtag" rel="nofollow noopener" target="_blank">#VisionFive2</a> board) than the 2022 snapshot old ones for <a href="https://gyptazy.ch/snac?t=riscv" class="mention hashtag" rel="nofollow noopener" target="_blank">#RISCV</a> on <a href="https://gyptazty.ch" rel="nofollow noopener" target="_blank">https://gyptazty.ch.</a> But you can also grab my whole QEMU image to build it yourself or just spawn up a <a href="https://gyptazy.ch/snac?t=chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> with <a href="https://gyptazy.ch/snac?t=qemu" class="mention hashtag" rel="nofollow noopener" target="_blank">#qemu</a> static (qemu-riscv64-static) by running: mmdebstrap --architectures=riscv64 --aptopt='Acquire::Check-Valid-Until "false"' --include="debian-ports-archive-keyring" sid /srv/riscv64-chroot "deb [trusted=yes] <a href="https://snapshot.debian.org/archive/debian-ports/20220616T194833Z" rel="nofollow noopener" target="_blank">https://snapshot.debian.org/archive/debian-ports/20220616T194833Z</a> unstable main" cp /usr/bin/qemu-riscv64-static /srv/riscv64-chroot/usr/bin/ chroot /srv/riscv64-chroot/ qemu-riscv64-static /bin/bash <a href="https://gyptazy.ch/snac?t=risc" class="mention hashtag" rel="nofollow noopener" target="_blank">#risc</a> <a href="https://gyptazy.ch/snac?t=riscv" class="mention hashtag" rel="nofollow noopener" target="_blank">#riscv</a> <a href="https://gyptazy.ch/snac?t=risc64" class="mention hashtag" rel="nofollow noopener" target="_blank">#risc64</a> <a href="https://gyptazy.ch/snac?t=riscv64" class="mention hashtag" rel="nofollow noopener" target="_blank">#riscv64</a> <a href="https://gyptazy.ch/snac?t=starfive" class="mention hashtag" rel="nofollow noopener" target="_blank">#starfive</a> <a href="https://gyptazy.ch/snac?t=vision" class="mention hashtag" rel="nofollow noopener" target="_blank">#vision</a> <a href="https://gyptazy.ch/snac?t=packages" class="mention hashtag" rel="nofollow noopener" target="_blank">#packages</a> <a href="https://gyptazy.ch/snac?t=crosscompile" class="mention hashtag" rel="nofollow noopener" target="_blank">#crosscompile</a> <a href="https://gyptazy.ch/snac?t=foss" class="mention hashtag" rel="nofollow noopener" target="_blank">#foss</a>

Linux TLDRAtoms is a Linux Chroot Management Tool with a User-Friendly GUI <a href="https://noc.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://noc.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://noc.social/tags/Chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chroot</a> <a href="https://noc.social/tags/Atoms" class="mention hashtag" rel="nofollow noopener" target="_blank">#Atoms</a> <a href="https://noc.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://noc.social/tags/Tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tech</a> <a href="https://noc.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://linuxtldr.com/atoms-tool/" rel="nofollow noopener" target="_blank">https://linuxtldr.com/atoms-tool/</a>

V_SAND WE ARE LIVE!!!STEP ONE COMPLETE!! Now to learn how to use the darn thing.Also the <a href="https://furry.engineer/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> idea worked!! I AM RUNNING APPIMAGES ON VOID LINUX!!! L E T ' S F _ C K I N G G O O O O O O O O O O O O O _<a href="https://furry.engineer/tags/voidlinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#voidlinux</a> <a href="https://furry.engineer/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://furry.engineer/tags/hardwarehacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hardwarehacking</a> <a href="https://furry.engineer/tags/logicanalyzer" class="mention hashtag" rel="nofollow noopener" target="_blank">#logicanalyzer</a> <a href="https://furry.engineer/tags/HYPED" class="mention hashtag" rel="nofollow noopener" target="_blank">#HYPED</a> <a href="https://furry.engineer/tags/EXCITED" class="mention hashtag" rel="nofollow noopener" target="_blank">#EXCITED</a>

V_S<a href="https://hackers.town/@thegibson" class="u-url mention" rel="nofollow noopener" target="_blank">@thegibson</a> Setting up <a href="https://furry.engineer/tags/Debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#Debian</a> on <a href="https://furry.engineer/tags/musl" class="mention hashtag" rel="nofollow noopener" target="_blank">#musl</a> <a href="https://furry.engineer/tags/voidlinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#voidlinux</a> to <a href="https://furry.engineer/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> into for installing <a href="https://furry.engineer/tags/leapmotion" class="mention hashtag" rel="nofollow noopener" target="_blank">#leapmotion</a> software to control my new hand/motion tracker/controller, only for the software to spit out this:Error: Missing Dependency: glibcThought I could cheat the system. Long story short, installed the GLIBC variant of Void on a USB, booted into it, and redid the process of converting and installing (guide coming soon).

Tech News WorldwideHow to Use chroot to Restrict SSH User Access to Certain Directory <a href="https://www.linuxtoday.com/developer/how-to-restrict-ssh-user-access-using-chrooted-jail/" rel="nofollow noopener" target="_blank">https://www.linuxtoday.com/developer/how-to-restrict-ssh-user-access-using-chrooted-jail/</a> <a href="https://aspiechattr.me/tags/useraccess" class="mention hashtag" rel="nofollow noopener" target="_blank">#useraccess</a> <a href="https://aspiechattr.me/tags/Developer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Developer</a> <a href="https://aspiechattr.me/tags/tutorial" class="mention hashtag" rel="nofollow noopener" target="_blank">#tutorial</a> <a href="https://aspiechattr.me/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> <a href="https://aspiechattr.me/tags/Jail" class="mention hashtag" rel="nofollow noopener" target="_blank">#Jail</a> <a href="https://aspiechattr.me/tags/SSH" class="mention hashtag" rel="nofollow noopener" target="_blank">#SSH</a>

Yann Büchau :nixos:How future-proof are <a href="https://fosstodon.org/tags/docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#docker</a> images? Will it always be possible in the future to launch a container from an ancient docker image?A <a href="https://fosstodon.org/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a>-able directory tree is extremely future-proof, isn't it? No extra software needed, right?The whole <a href="https://fosstodon.org/tags/NixOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NixOS</a> / <a href="https://fosstodon.org/tags/GUIX" class="mention hashtag" rel="nofollow noopener" target="_blank">#GUIX</a> approach looks nice and you would just need <a href="https://fosstodon.org/tags/plaintext" class="mention hashtag" rel="nofollow noopener" target="_blank">#plaintext</a> files to share an environment, but it seems fragile in terms of future source code availability of all dependencies.<a href="https://fosstodon.org/tags/reproducibleResearch" class="mention hashtag" rel="nofollow noopener" target="_blank">#reproducibleResearch</a> <a href="https://fosstodon.org/tags/reproducibleBuilds" class="mention hashtag" rel="nofollow noopener" target="_blank">#reproducibleBuilds</a> <a href="https://fosstodon.org/tags/askfedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#askfedi</a> <a href="https://fosstodon.org/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://fosstodon.org/tags/research" class="mention hashtag" rel="nofollow noopener" target="_blank">#research</a>

Tech News WorldwideCShell/SNX chrooted Wrapper Automated Setup for Linux <a href="https://www.linuxtoday.com/developer/cshell-snx-chrooted-wrapper-automated-setup-linux/" rel="nofollow noopener" target="_blank">https://www.linuxtoday.com/developer/cshell-snx-chrooted-wrapper-automated-setup-linux/</a> <a href="https://aspiechattr.me/tags/CShellCheckpoint" class="mention hashtag" rel="nofollow noopener" target="_blank">#CShellCheckpoint</a> <a href="https://aspiechattr.me/tags/Developer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Developer</a> <a href="https://aspiechattr.me/tags/chroot" class="mention hashtag" rel="nofollow noopener" target="_blank">#chroot</a> <a href="https://aspiechattr.me/tags/Ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ubuntu</a> <a href="https://aspiechattr.me/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://aspiechattr.me/tags/SNX" class="mention hashtag" rel="nofollow noopener" target="_blank">#SNX</a>

Recent searches

Search options

Administered by:

Server stats:

#chroot