Re: HOWTO chroot squid ??

Ant,

If you're using freebsd, then you need to copy
/etc/pwd.db as well.

> Hello all,
> Im trying to chroot squid 2.3.STABLE.1 put
> in /usr/squid
>
> /bin/squid
> redir
> client
> dnsserver
> unlinkd
> /etc/mib.txt
> resolv.conf
> passwd
> protocols
> services
> hosts
> squid.conf
> mime.conf
> icons/ - subdir for icons
> errors/ - subdir for error files
> /logs - subdir for log files
> /dev/zero -
> /lib/ld-linux.so.2
> ld.so
> libc.so.6
> libm.so.6
> libresolv.so.2
> libnss_files.so.1
> libnss_dns.so.1
> libpthread.so.0
>
> I also add into squid.conf
> cache_effective_user nobody
> cache_effective_group nogroup
> chroot /usr/squid
>
>
> When I start as root: ./squid -X
> I gote:
> -----------CUT-----------------
> 2000/06/28 15:50:35| Processing: 'cache_effective_user nobody'
> 2000/06/28 15:50:35| parse_line: cache_effective_user nobody
> 2000/06/28 15:50:35| Processing: 'cache_effective_group nogroup'
> 2000/06/28 15:50:35| parse_line: cache_effective_group nogroup
> 2000/06/28 15:50:35| Processing: 'chroot /usr/squid'
> 2000/06/28 15:50:35| parse_line: chroot /usr/squid
> -----------CUT-----------------
> 2000/06/28 15:50:35| Squid is not safe to run as root! If you must
> 2000/06/28 15:50:35| start Squid as root, then you must configure
> 2000/06/28 15:50:35| it to run as a non-priveledged user with the
> 2000/06/28 15:50:35| 'cache_effective_user' option in the config file.
> FATAL: Don't run Squid as root, set 'cache_effective_user'!
> Squid Cache (Version 2.3.STABLE1): Terminated abnormally.
>
> When I start as effective user(nobody) I got
>
> FATAL: failed to chroot
> Squid Cache (Version 2.3.STABLE1): Terminated abnormally.
> CPU Usage: 0.020 seconds = 0.020 user + 0.000 sys
> Maximum Resident Size: 0 KB
> Page faults with physical i/o: 181
>
>
> Best regards,
> Ant mailto:Ant@ibd.ru
>
>
Received on Wed Jun 28 2000 - 12:57:49 MDT