CAGE(8)

NAME
cage - provide a login cage for potential intruders

SYNOPSIS
cage

DESCRIPTION
cage is meant to be started as a users shell from the /etc/passwd file, and provides a chroot(2)'ed environment for that user. In order to be able to use chroot(), cage needs to be setuid root. A directory to mimic a restricted root directory is compiled into the cage program, by default /usr/cage. When cage is run as a shell, it will chroot to that directory, and look for a /etc/passwd file relative to that directory. This file decides which shell to exec for the given user. When logged in, such an encaged user will only be able to see a small part of the "world", and he or she will hardly notice, but can potentially do lesser harm. Cage fakes /etc/utmp and /etc/wtmp entries inside the cage so last(1) and getlogin(3) will work inside the cage. Unfortunately, ttyname(3) won't work inside the cage, unless you mimic a /dev directory inside the cage, something that is not advisable, except for a few device files such as /dev/tty, /dev/null and /dev/zero.

FILES
/etc/passwd, /etc/utmp /etc/wtmp

SEE ALSO
chroot(2), last(1), getlogin(3), ttyname(3), login(8), getty(8), init(8).

AUTHOR
Peter Orbaek (poe@daimi.aau.dk)

NOTE
This is still in beta, bevare!