X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-6.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_HI,SPF_HELO_PASS,T_RP_MATCHES_RCVD
X-Spam-Check-By:	sourceware.org
Message-ID:	<4BB50186.5060003@redhat.com>
Date:	Thu, 01 Apr 2010 14:26:46 -0600
From:	Eric Blake <eblake AT redhat DOT com>
User-Agent:	Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.8) Gecko/20100301 Fedora/3.0.3-1.fc12 Lightning/1.0b1 Thunderbird/3.0.3
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com, d DOT sastre DOT medina AT gmail DOT com
Subject:	Re: How to properly set up a chrooted environment
References:	<20100401201915 DOT GA3964 AT ghost DOT local DOT lan>
In-Reply-To:	<20100401201915.GA3964@ghost.local.lan>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

--------------enigDF023FCEA73230A8CC1B6EF2
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On 04/01/2010 02:19 PM, d DOT sastre DOT medina AT gmail DOT com wrote:
> Hello,
>=20
> I'm trying to build a chrooted env in a windows 7 box:
> CYGWIN_NT-6.1 win7 1.7.2(0.225/5/3) 2010-03-24 21:12 i686 Cygwin

What do you hope to accomplish with this?  You are NOT adding any
security to your system by using a cygwin chroot, because you do not
have operating system support (that is, an application can escape the
jail by using native Windows commands).  chroot exists to ease porting
some programs (such as coreutils), but is NOT a solution for security
that you seem to think it is.

>=20
> -is there a canonical way to do this?
>  (and where is the manual :-))

There is no manual for chroot on cygwin, because no one here recommends
doing it for anything serious.

--=20
Eric Blake   eblake AT redhat DOT com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org


--------------enigDF023FCEA73230A8CC1B6EF2
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Public key at home.comcast.net/~ericblake/eblake.gpg
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAku1AYkACgkQ84KuGfSFAYBtPwCdG/aHUe/XO6i327HNH3wi0p+9
J/cAoKeg5MZgMVWSMFioZ9dzdP3apSiF
=Mdzq
-----END PGP SIGNATURE-----

--------------enigDF023FCEA73230A8CC1B6EF2--

- Raw text -