Re: Chroot and X-Window applications

From: Julien Salgado (Julien.Salgado_at_f_r_e_e_f_r.ignore.invalid)
Date: 05/15/03

  • Next message: Julien Salgado: "Re: iptables and FTP"
    Date: 15 May 2003 07:43:18 GMT
    
    

    Erwan Becquet wrote :
    > Hi everybody,

    Hi,

    > I have a strange problem, I want to start programs
    > from a chrooted tree. It works perfectly with non-x
    > apps. But with X apps (emacs for example), I have an
    > error "Cant Connect to X Server on :0". Same work
    > perfecly without chroot.
    >
    > I think X-Window use some special place of the filesystem
    > but I cant find what.

    X needs a socket either a unix socket (Sometihng like /tmp/.X11-unix/X0)
    or a TCP/IP socket. The connection to :0 is refering to the latter.

    > I tried with a chroot on / and it works. But when I tried
    > to copy whole tree on a subtree (like /tmp/jail), so I have
    > under /tmp/jail : usr, var,etc, tmp, bin, sbin, home etc ...
    > and try that, it fails.
    >
    > Has someone already encounter a similar problem ? Or maybe
    > someone has a deep knowledge of X-Window mechanisms and could
    > help me ?

    Normally it should work, but chrooting an X application is only usefull
    if X is completely chrooted (i.e. an X client is not accessing a X
    server outside the chroot). So you will have to included a large amount
    of library and binary in your chroot.

    > Thanks in advance.

    -- 
    Julien
    

  • Next message: Julien Salgado: "Re: iptables and FTP"

    Relevant Pages

    • Re: bug in libc6
      ... > | install it into it's own little chroot containing whatever old libraries ... > Before I go off and do this, it occurs to me that running an X server ... > in chroot might be problematic. ... one machine and your apps on another. ...
      (Debian-User)
    • Re: Chroot and X-Window applications
      ... >> I have a strange problem, ... >> apps. ... >server outside the chroot). ... If it got far enough to give him a "Can't connect" message, the libraries ...
      (comp.security.unix)
    • Re: Chroot and X-Window applications
      ... > I have a strange problem, ... But with X apps, ... > I tried with a chroot on / and it works. ... Nigel Wade, System Administrator, Space Plasma Physics Group, University of Leicester, Leicester, LE1 7RH, UK ...
      (comp.security.unix)
    • Re: BUG? atleast >=2.6.19-rc5, x86 chroot on x86_64
      ... for 10 days, and then chroot in, run ... the 32bit apps, and within hours of using, hardlock. ... Early AMD K8 platforms had a hardware bug that could have caused ...
      (Linux-Kernel)
    • Re: [RFC][PATCH 0/11] security: AppArmor - Overview
      ... You may filter out worms and script kiddies this way but in the end you are using obscurity (of filesystem layout, what the policy allows, how the apps are configured, etc) for security, which again, leads to a false sense of security. ... I was paying attention, thank you. ... So it may not be able to chroot during runtime but if you can't be sure that it starts in the chroot the argument still applies. ...
      (Linux-Kernel)