Chrootin' radiusd
Craig Brozefsky (cosmo@dobie.ebs.net)
Mon, 9 Sep 1996 11:32:28 -0500 (CDT)
I have some sloppy patches for radiusd which chroot it to a directory
specified in radius.h that some people may be interested in. This is a
'good thing' for security, since there are several problems with radiusd
which are not going to be easily fixed anytime soon and chrooting the
deamon restricts what damage could be done.
does Livingston or other's who distribute a radiusd do this presently, or
are they planning to do this? Radius only access, accounting,
dictionary, users, logs and password files so it's very easy to build the
chrooted environment. It also allows you to use seperate password files
in case you us the UNIX keyword.