A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms (1)

1
vote
0answers
11 views

run commands in schroot environment from chroot host (outside chroot)?

I have a program to run in a schroot environment. I can run like this without an error: user@precise:~$ schroot -c trusty (trusty)user@precise:~$ myprogram.sh my.Rmd However, when I call the ...
1
vote
1answer
37 views

How to create chroot'ed SFTP access on an Archlinux Server?

I've followed this instructions on the ArchWiki and GeekStuff to setup an user which can only access the server via SFTP (SSH) but without Shell (/bin/false) in a chrooted environment of his home dir. ...
2
votes
1answer
33 views

Error using dnssec-signzone in chroot'd bind 9.8 when a zone file includes other files

Using bind 9.8.2 on RHEL 6.5, running chroot'd. I have a zone file that includes other files (it's a zone with a large number of servers in different datacenters, and there's one included file per ...
1
vote
1answer
46 views

How to prevent sftp users from viewing some directories (inside their chroot directory)

The sftp users of my server are chrooted together in a specific directory. They all belong to the group sftponly. The rights are ok, including a special right to prevent users from overwriting ...
0
votes
1answer
56 views

How to Isolate users process from core process i.e from kernel processes completely? [closed]

Chroot is not good option as stated at many places due to root process can easily exit the chroot Is there any way to isolate the user space completely in *nix based systems?
0
votes
1answer
114 views

Chrooting Apache 2.4 on Debian Jessie with mod_security

I have been advised to chroot my apache2 installation to better secure the sensitive content on the rest of the server. I have installed and setup mod_security properly and can see in the logs that it ...
0
votes
2answers
50 views

SSH failing for jailed account

I tried to setup a chroot jail for a user account I specifically setup for ssh. I set it up and it seemed to work fine yesterday but today it is not working. It doesn't seem to be an SSH issue since ...
1
vote
1answer
19 views

How to identify that BIND is running under chroot

I am trying to run BIND under chroot on Ubuntu and CentOS. Installing it on CentOS is pretty straight forward with just installing the packages - bind and bind-chroot, while Ubuntu is a little more ...
1
vote
1answer
74 views

Changing password of a sftp chrootDirectory stops it from logging in

So I have a chrootdir setup in sshd_config to a folder, and the user myuser, it's been working fine for months, then today I wanted to change myuser's password, so I did this with passwd, then ...
2
votes
1answer
35 views

Create a Web User

I am running Apache 2.4.8 on Arch Linux, but that doesn't matter really. I would like to create a user who is devoted to web management. I have created a user, a group, and added the user to the ...
0
votes
1answer
64 views

SecChrootDir Jailing apache 2.2.X on Centos 6.7

I was trying to do apache jailing on centos 6.7 with modsec. I already built everything even the jail directory and remodeled the config files. httpd(apache) says it started nicely, however its dead. ...
3
votes
1answer
178 views

Should Postfix run chrooted if it already is in it a FreeBSD jail?

I'm running Postfix together with Dovecot and a few milters in a FreeBSD jail. Is there a significant security gain when I run SMTP and SMTPD daemons chrooted as well?
1
vote
1answer
107 views

SFTP chroot to /var/www stopped working

04 and setup sftp chroot to /var/www for our 2 developers. I followed the guide available online (referenced a few other as well) http://www.krizna.com/ubuntu/setup-ftp-server-on-ubuntu-14-04-vsftpd/ ...
3
votes
1answer
103 views

vsftp: why is allow_writeable_chroot=YES a bad idea?

There are several thousand blog posts about vsftp and allow_writeable_chroot=YES The common error message: Fixing 500 OOPS: vsftpd: refusing to run with writable root inside chroot () I solved ...
-1
votes
1answer
24 views

Chroot Jailing groups via sshd_config for FTP results in connection aborted for all members in that group

I am attempting to chroot jail using the /etc/ssh/sshd_config file. My FTP server is vsfptd, and while I know how to chroot jail using vsftpd's config, I want to try it using sshd_config. However, ...
1
vote
1answer
62 views

What are the correct Linux permissions inside chroot jail with userspec

I am trying to setup a chroot jail, then I did: which binary ldd /bin/binary Then I did: cp /lib64/{libs} $jail/lib64 cp /usr/lib64/{libs} $jail/usr/lib64 PS: During this setup, I discovered ...
0
votes
2answers
215 views

permission denied on authorized_keys

I am attempting to set up SFTP for chrooted users, and use SSH public key authentication. In this example I'll be working with the dummy user "globocorp" who's a member of "sftpusers". This user is ...
0
votes
0answers
31 views

Run Crontab command in jailed enviroment

I had created a user account in my server. And I created a jailed enviroments for that user. One thing i need is how to run crontab command in jailed enviroments. I tried add bash crontab to ...
0
votes
1answer
75 views

To chroot or not to chroot (using alternatives)

For a VPS with some small websites, some users need SFTP-access. I want jail them in their own /home/-directory. This directory contains the data for the website. This is all new for me, so i need ...
0
votes
1answer
279 views

How to add user with SFTP access to '/var/www/html/adir' folder on Amazon EC2?

This question is very much related to this question. The answer there is useful, but unfortunately incomplete. How to add user with SFTP/ FTP access to '/var/www/html/website_abc' folder on ...
0
votes
1answer
92 views

internal-sftp -u 002 is ignored for copied files

I configured OpenSSH like this Subsystem sftp internal-sftp Match Group sftp ForceCommand internal-sftp -u 002 AuthorizedKeysFile /home/sftp/ssh/%u ChrootDirectory %h ...
0
votes
1answer
92 views

named-sdb (bind) can't resolve mysql hostname in chroot

When running bind in chroot, the mysql dlz driver cannot resolve the hostname of the mysql server (rds). Using amazon ami (centos based) in VPC. Aug 25 10:22:27 paper named-sdb[6812]: Loading 'Mysql ...
1
vote
1answer
635 views

VSFTPD allows root access despite being listed in ftpusers file

I've installed VSFTPD on a LEMP stack on Ubuntu 14.04. The only significant changes made to vsftpd.conf are: anonymous_enable=no local_enable=yes write_enable=yes chroot_local_user=yes ...
0
votes
1answer
185 views

VSFTPD Cant perform anon uploads. 500 OOPS

I can't get my vsftpd config to allow anon root uploads. $ vsftpd -v $ vsftpd: version 3.0.2 $ cat /etc/vsftpd.conf # Example config file /etc/vsftpd.conf # # The default compiled in settings are ...
0
votes
0answers
25 views

Setting up a secure SFTP drop folder for serving web pages

I've set up a chrooted sftp folder following the instructions here: http://www.thegeekstuff.com/2012/03/chroot-sftp-setup/ It works fine, my only problem is it appears there is a glaring ...
0
votes
1answer
116 views

sftp server chroot initial directory

I have configured an sftp server with chroot and it works fine, the only thing that is bothering me is the initial landing directory, since the sftp user does not have write permissions in the landing ...
0
votes
1answer
142 views

What is the best method of installing programs into a chroot / jail?

On a Debian based system... I have created a minimal chroot/jail using a script similar to the one at https://github.com/pmenhart/make_chroot_jail/blob/master/make_chroot_jail.sh with the goal of ...
0
votes
1answer
33 views

Restrict SFTP folder with PHP permisions

I want an user to have access to /var/www/domain.com/public_html so I followed this tutorials, but with my modifications so I can have my users upload directly to their domains: ...
2
votes
1answer
2k views

A proper way to create a chrooted SSH on CentOS 7 [closed]

There are a lot of tutorials of how to create a chrooted SFTP, but I would like to use SSH, because it is much faster to simply wget, unzip, mysql and mysqldump than tossing around the FTP and ...
0
votes
1answer
40 views

vsftpd chroot configuration

I'm having problems setting up correctly VSFTPD with chroot on a Ubuntu 14.04 (LTS) server. No matter what I try, I keep being allowed to freely navigate the server. Here is my /etc/vsftpd.conf file ...
0
votes
1answer
336 views

SSH - ChrootDirectory not working

I am trying to chroot a "test" user (group sftp) to /home/test. I've added the following lines at the end of my sshd_config: Subsystem sftp internal-sftp Match User test ChrootDirectory ...
2
votes
1answer
359 views

Set Initial Remote Working Directory in SFTP

I am running Amazon Linux AMI (Red Hat derivative), and am creating a new SFTP server using OpenSSH. I would like for the SFTP user to be restricted to a directory, and to be able to write to the ...
-1
votes
2answers
550 views

Chroot user to an existing folder witch parent owner isn´t root [closed]

We have moodle installed on our company and due to big SCORM packages + slow conection + proxy, I usually upload them with SFTP with my root user. Now, I want to give users a way to upload files by ...
0
votes
0answers
235 views

SFTP chroot jail not working

Trying to follow this tutorial but for Arch Linux. /etc/ssh/sshd_config: # override default of no subsystems #Subsystem sftp /usr/lib/ssh/sftp-server Subsystem sftp internal-sftp ...
0
votes
1answer
328 views

schroot only works as root

I recently changed my OS from openSUSE to CentOS. A part of that transition was migrating my chroot jails and schroot configuration. That transition does however not seem to be "plug and play". I used ...
1
vote
0answers
638 views

CentOS 6.5 ssh ChrootDirectory not working

I have been trying to configure my CentOS 6.5 minimal 64 bit machine to allow SFTP users to connect and get jailed to specific folders. I can sftp in using the unix commmand: "sftp user@localhost" and ...
1
vote
1answer
683 views

Chroot on Ubuntu 14.04.2 using Jailkit - /dev/pts No such file or directory

For the past few days I've been trying to setup a chroot on my Ubuntu server but I've been running into an issue. I've tried several different methods of setting up a chroot on Ubuntu including just ...
0
votes
2answers
367 views

Trying to ChrootDirectory an SFTP user to their home directory

I have followed a few examples of how to do this, all of them end up with modifying sshd_config to Subsystem sftp internal-sftp Match User chubbyninja ChrootDirectory %h AllowTCPForwarding ...
0
votes
2answers
305 views

Enable non root user to upload/download onto website directory

I have a website in my VPS. I install Debian 7 on that VPS. My http document is located in directory /var/www/example.com I installed Nginx on that server and directory /var/www/example.com is owned ...
-1
votes
1answer
83 views

I can't create chroot user with full permissions

I am trying to create chroot user but i want to give him a permissions to create and delete files and directories. I have Ubuntu server installed on virtualbox and i am connecting to it from my host ...
0
votes
0answers
126 views

PHP FPM, chroot can't connect to AWS RDS

I've been experimenting with chroot'ing php-fpm pools via the built-in chroot method in php's pool config. This is for the purpose of hosting multiple wordpress websites on the same AWS EC2 instance. ...
0
votes
1answer
309 views

Files uploaded using FileZilla with SFTP are missing permissions

I am using chroot in sftp. And it works perfectly, but files uploaded with FileZilla are stored without any permissions (basically 000). ---------- 1 cwsftp sftp 4364328 Jan 19 16:02 ...
0
votes
1answer
141 views

sftp login issue with chroot

I want to be able to create a structure for hosting multiple sites. I want the user files to reside inside /var/www/sites/domain.com and the sftp access to be restricted with chroot. I've followed ...
0
votes
1answer
241 views

Configuring Chroot for SFTP Users

I am trying to configure a SFTP server for some automated backups. I configured an Ubuntu 14.04 server and have had partial success. The idea I'm looking to do is this: A user will be created for ...
2
votes
1answer
387 views

How to 'apt-get upgrade' a debootstraped chroot jail from outside?

I have a daemon running in a chroot jail that I have generated with debootstrap. I'd like to remove apt and dpkg from the jail, but I want to keep the other packages updated. Can I upgrade the ...
0
votes
1answer
175 views

How to lock a user into a directory (not SSH)

I have regular users who are not SSH'd into a machine but are accessing the machine directly. How can I lock them into their home directory or any directory? At the moment they can successfully run rm ...
0
votes
1answer
354 views

Chrooting Shell Environment on debian wheezy

I created a chrooted user on a directory /home/jail, Inside my /home/jail are the bin,dev,etc,home,lib,lib64 and usr directories. /home/jail/ {bin,dev,etc,home,lib,lib64,usr} are all owned by ...
1
vote
0answers
267 views

Why is update-grub unable to find my root device?

I created a new root partition and I am trying run update-grub inside a chroot. I bindmount the following for i in /dev /dev/pts /proc /sys /run; do sudo mount -B $i /mnt$i; done And then: ...
0
votes
2answers
1k views

Chroot doesn't work in PHP5-FPM + nginx

I have added two line in: "/etc/php5/fpm/php-fpm.conf". There are: chroot = /home/user/www/public_html chdir = / In the server section of my: /etc/nginx/sites-available/default: root ...
0
votes
1answer
70 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...