DSM-G600, DNS-3xx and NSA-220 Hack Forum

Hello,

I've googled and googled then tired to jail php, but .... no success. Ok it is what I've done:

1. Using madpenguin's script I find out what libraries use "php-cgi", "php" and "lighttpd" and copied tese to /wwwroot/lib
2. Copied /ffp/bin/php-cgi, /ffp/bin/php, /ffp/sbin/lighttpd to /wwwroot/bin
3. Copied /ffp/etc/lighttpd.conf and /ffp/etc/php.ini to /wwwroot/etc
4. Changed lighttpd.conf to use php, put www into jail
5. Started lighttpd and got error:

2009-02-15 17:12:54: (log.c.97) server started 
2009-02-15 17:12:54: (mod_fastcgi.c.924) bind failed for: unix:/mnt/HD_a2/www/tmp/php-cgi.socket-0 No such file or directory 
2009-02-15 17:12:54: (mod_fastcgi.c.1365) [ERROR]: spawning fcgi failed. 
2009-02-15 17:12:54: (server.c.897) Configuration of plugins failed. Going down.

6. Tried to change lighttpd.conf to not use php and started - success
7. Tried to run lighttpd with not chrooted php - success

Ok, I don't ask to tell me what to do, tell at least some directions on what can I do next ? I'm totaly confused here.

Regards,
alpha

Hi,

Thanks for fast reply. I set php socked dir to /mnt/HD_a2/tmp, but I got the same error. I even set chmod 777, but error is still the same. Maybe some other ideas ?

Regards,
alpha

Hi,

Ok, I see no one wants to help (just kidding). I found "/ffp/bin/php-config". Please tell me why this file is used for ? I saw lots of paths inside this file and every path was pointing to /ffp. I tried to change it, but no success. Please, someone....

Regards,
alpha

Hello,

Silence in this thread is killing me. I think there must be only two posibilities for that:
1. Everyone has set up chrooted lighttpd+php and no one can understand why I ask so stupid questions.
2. No one know how to setup chrooted lighttpd+php and sits silent (I don't believe)

So please write here something. At least "I can't configure chrooted lighttpd+php and has issues like you"
or "I have configured lighttpd+php successfuly and don't want to help you". Now I have no idea how many people
has the same issues and how they deal with it.
Ok, I've read lots of links and how to's, but can find the answer. So.... I'll wait for any answer here.

Regards,
alpha

Hello,

First of all thank you very much for helping and answering. I'm really happy because I want to do chroot very very much

madpenguin wrote:

As to your first issue with the tmp directory, why not change your lighttpd.conf to say:

Code:

fastcgi.server = ( ".php" => ((
    "bin-path"  => "/wwwroot/bin/php-cgi",
    "socket"    => "/wwwroot/tmp/php-cgi.socket",
    "max-procs" => 1,
    "idle-timeout" => 10
)))

Then:
mkdir /wwwroot/tmp
chmod 777 /wwwroot/tmp

You've got to change all that stuff. Server logs and everything. Or crap.... Maybe if you put the above, it's actually going to be looking for /wwwroot/wwwroot/tmp.... You are trying to chroot after all. Maybe if you just put "/tmp" in there, it'll actually be looking at /wwwroot/tmp.... Don't know. Never messed with it.

I have done like this and did some tests. Nothing helped, but I have got some knowledge. If you write for tmp '/wwwroot/tmp/php-cgi.socket' then you get error.log that lighttpd searches for '/wwwroot/tmp/php-cgi.socket' and if I write to lighttpd.conf for tmp '/tmp/php-cgi.socket' and I can see that lighttpd searches for '/tmp/php-cgi.socket'. So you have settings for fastcgi.server in lighttpd.conf and system do not add chroot prefix to it.

madpenguin wrote:

Try to work around the ffp/lib issue by doing something like this:

mkdir /wwwroot/ffp
cd /wwwroot/ffp
ln -sf ../lib .

Use your imagination. Make it work!!!

This is the case I think !!!!!!! You the man !!! I try this today. Somehow I think it will work. I try and write here.

One more think that I did not like. I did this:

chroot /mnt/HD_a2/www /bin/php-cgi

.. and got error "chroot: cannot execute /bin/php-cgi: No such file or directory"
/mnt/HD_a2/www is my /wwwroot
So I do not understand why this problem I have.

Regards,
alpha

Good job!

I almost think it would be better if one were to just recompile the programs needed to have a --prefix=/wwwroot.....

I think this whole exercise borders on the paranoid side, so.... That being the case, you might not want an ffp directory inside your chroot. If anyone ever did gain access thru lighttpd (probably extremely unlikely), it would show that your running on a Dlink NAS.... Best to keep the server platform anonymous but whatever...

For that matter, it's also a good idea not to broadcast your server string in the footer of a directory listing. You can set your "server.tag" to be blank or mimic an apache string.

Hiding README.txt files in a directory listing (dir-listing.exclude) might also prevent someone from saying "ah.... lighttpd".... Adding icons with "dir-listing.external-css" also helps to mask the default look of lighttpd as well as sprucing things up a bit...

If your going to be paranoid, you might as well be paranoid...

Have attempted to setup things up as documented here - just doing the simple web server at this time.  Got it to work and then tried to implement the security setup per the above string.  My problem is when I reboot the DNS-323 the userid and group that I created (lighttpd) have been removed from the passwd and group files in /etc.  I checked before rebooting and they were there.  Even tried recreating them but again after rebooting, they were no longer there.  I'm running firmware 1.08 so not sure if this might be a feature or not.  Any ideas?