A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms

1
vote
4answers
152 views

How to give developer shell access to use GIT and manage code, nothing else?

In CentOS 6.5 (SElinux off, chroot) with Webmin/Virtualmin (latest version) I want to give a developer access to SSH within /home/site so he can use only git to manage the code. I also want to give ...
0
votes
0answers
17 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
0
votes
1answer
32 views

suPHP : proper use of the chroot feature

I started using suPHP recently, and I'm spending an amazing amount of time debugging the configurations and different compile options to get something that actually works. I've tried contacting the ...
2
votes
1answer
80 views

VSFTPD how chroot not chrooted users in /home?

I need to chroot all local users to their home directories, but one user should have access to all user directories. If I put admin_user in chroot_list_file he has access for whole file system. I want ...
0
votes
1answer
60 views

SFTP restrict users to a few directories

I run a game server and I have a few people that I want to give access too the server to help develop. I am trying to let them have access to only these directories /var/www/Update /root/gamed/config ...
3
votes
1answer
59 views

using /bin/bash in a chroot environment - symlink or mount

A user connects via ssh. The user is also chroot-ed to their home directory. The goal is security. Since the user is chroot-ed, when they login /bin/bash is not found. Obviously the user needs ...
1
vote
1answer
72 views

chroot user to var/www/html

Can I limit a user login through sftp only can see and change files under var/www/html folder? I tried below, but then I can't login in Transmit through sftp # adduser user_www # passwd user_www # ...
-1
votes
2answers
115 views

Chrooted ssh user cannot ssh into server : broken pipe

I just tried the following to add a new user, chroot the user and give him access to the folder /home/me/public_html via sftp and ssh : ##the following command are done by root or a sudo user useradd ...
1
vote
0answers
55 views

ChrootDirectory for SFTP user in virtual host directory with write permissions and SuPHP

I am trying to give a SFTP user (user2) writeable access to a virtual host directory (website) in /var/www/mywebsite under Ubuntu 12.04. I have setup sshd_config to use Chrooting so that this user ...
3
votes
1answer
69 views

df shows too much space on tmpfs

I have a server (SLES 11 running on a VMware hypervisor if that matters) with a tmpfs partition meant for mysql temporary tables, and I run mysql chrooted. df -h gives me strange outpupt: ...
1
vote
0answers
52 views

How can I get openSSL to run on my web server with a PHP5-FPM chroot?

On my web server, I changed the chroot to only have access to the root of my website's home directory as opposed to the rest of the file system, for security purposes. However, I've noticed that since ...
0
votes
0answers
62 views

SSH chroot solution for Mutt

We have an environment tailored for our users to log in via ssh and instead of gaining access directly to a shell, users have a script in place of a shell. The script simply launches Mutt on the ...
0
votes
1answer
112 views

openssh sftp chroot: two levels of access

I would like to achieve the following with OpenSSH's internal-sftp, chroot and Match directive: Users belonging to group sftpuser should have read and write access to /srv/sftp/{username} (or ...
2
votes
1answer
146 views

build user chroot on first login

I'm using ldap for remote user authentication and I basically need to either figure out how to: a. chroot a user on machine b from machine a via nfs,(which doesn't seem possible without mounting ...
7
votes
1answer
390 views

Why is chroot system call not available to non root user?

I was reading description about setuid on wikipedia http://en.wikipedia.org/wiki/Setuid I was unable to understand how chroot is related to setuid as mention in following paragraph from wikipedia ...
0
votes
0answers
27 views

pureftpd virtual user access

I need to create multiple virtual users to have access to a home directory of a user, even though i have set up the chroot according to documentation. Restarting ftp server: Running: ...
1
vote
1answer
2k views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory ...
0
votes
1answer
94 views

How to set ulimit in chroot with --userspec

I have script to create a minimal chroot (below), but I can't figure out how to get ulimit to work on the chroot'ed process: #!/bin/bash user=$1 apps="$2" cmd_to_run="$3" shift 3 ...
0
votes
1answer
154 views

Mininet additional veth pair between host and server

For those who don’t know - Mininet is a tool that allows for the automated creation of multiple OVS switches, chroot linux ‘containers’ as hosts and links them all together to prototype OVS powered ...
0
votes
2answers
69 views

SFTP Chroot Ubuntu 10.10

I'm trying to give an SFTP only access to his home directory to a user. This is the /etc/passwd line for the user: bob:x:1003:1003::/home/bob:/bin/false I edited the /etc/ssh/sshd_config file like ...
0
votes
1answer
49 views

Cannot get static file with chroot wordpress

I was trying to configure chroot with php-fpm and mysql. I managed to work it out, however when I try to reach files other than index.php (like css, png etc.) it keeps giving 404. However when I ...
1
vote
1answer
114 views

Chroot with SSH connections doesn't work

I have found How can I chroot ssh connections? and a lot of different blog articles and similar (http://undeadly.org/cgi?action=article&sid=20080220110039, ...
1
vote
2answers
845 views

Chrooted SFTP user - Write permission denied even for owner

On CentOS release 6.5 (Final) I created a restricted user test1 useradd -s /bin/false test1 and configured ssd_config as following Subsystem sftp internal-sftp Match User test1 ...
0
votes
1answer
1k views

vsftp error: 500 OOPS: child died

I installed vsftp, and then setup the config file as following: anonymous_enable=NO local_enable=YES write_enable=YES local_umask=022 chroot_local_user=NO chroot_list_enable=YES ...
0
votes
2answers
74 views

Nginx and chroot users - Permission denied

I use nginx 1.4.4 and I created a chrooted user. This user can only see his /home/user folder, and I created in a "www" folder. I put in my virtual host file : root /home/user/www; But I have an ...
0
votes
1answer
174 views

Run chroot's /etc/init.d on system startup?

So I have this dedicated server that is running Debian. I have an intense business need (client's requirement) that I also install Gentoo as a Chroot. I have successfully done so, but now, I am ...
0
votes
2answers
179 views

chroot: can't resolve domain names [closed]

i can't resolve domain names in chrooted environment - in the normal shell it works fine. i'm using plesk 11.5 and my chroot environment contains the following: ...
3
votes
1answer
2k views

SFTP: log to a separate file for chrooted user

I would like to log SFTP commands to a separate file however it works only for root but not for chrooted user: # cat /etc/ssh/sshd_config ... Subsystem sftp internal-sftp -l INFO Match Group ...
1
vote
0answers
163 views

Pure-FTPD: chroot doesn't chroot

On a Debian Wheezy machine, I've installed Pure-FTPD. As I wanted the users to be chrooted into their home directories, I took a look at the virtualchroot functionality. After a bit of configuration, ...
0
votes
0answers
57 views

Nginx + chroot'ed PHP-FPM using wrong path

I'm trying to setup a chroot'ed website using Nginx + PHP-FPM, but it's not working as expected (or hoped). When I open the website (example.com/webapp/), it calls ...
1
vote
1answer
122 views

FTP users can't see any files when chrooted

On a Debian Wheezy 64bit, I create a new user for a customer to place files into a directory. After the user is created, I take away his interactive login by replacing /bin/bash with /bin/false in ...
8
votes
4answers
403 views

Why running named(bind) in chroot is so important for security? Or maybe it is not ?

I'm playing with bind and started wondering why this software is for example in CentOS running in chroot. Don't misunderstood me I know what bind is and what chroot (jail) is for. But my main wonder ...
0
votes
0answers
110 views

Postfix Inside Minimal Chroot Environment. It Complains About Nobody User

I'm trying to make the most minimal chroot environment to run a local postfix on my network. I have done this far: created chroot and setup 4 standard mounts (proc, sys, dev, dev/pts) installed ...
2
votes
1answer
569 views

nginx+php-fpm(chroot). No input file specifed

OS: Centos PHP: 5.5.6 Nginx: 1.4.4 Nginx conf server { listen 80; server_name example.ltd; root /srv/example.ltd/www; index index.php; access_log /srv/example.ltd/logs/nginx-main.log main; ...
1
vote
1answer
237 views

Chroot issue, broken pipe

I need to give access to a developer to our server vía ssh. I hosted his web on /home/miuser and some other web applications in /home/... I have this config in my Subsystem sftp internal-sftp Match ...
0
votes
2answers
130 views

force group assignment in chrooted sftp environment

I've got the following setting: There are several users /home/user1, /home/user2, and so on. Additionally there is a user /home/sftp-all. The folder /home/sftp-all/shared is mounted in every other ...
1
vote
0answers
99 views

Built in chroot jail RHEL 5 returns No such file or directory

I need to create a chroot jail on my RHEL5 production server to allow a specific user to work with the less right possible, but with GIT. Here is my system configuration : RHEL 5 : Release 5.10 ...
0
votes
1answer
84 views

How to create chroot jail with ability to change some system settings

How to properly create chroot jail (on Ubuntu, or some some other Linux if not applicable) to make user able to edit system settings (eg. with ifconfig) and be able to communicate with external ...
0
votes
1answer
150 views

Set Users as chrooted for sftp, but allow user to login in SSH

I have setup a ssh server on debian 7, to use sftp connection. I chrooted some user, with this config: Match Group sftpusers ChrootDirectory /sftp/%u ForceCommand internal-sftp But if i ...
2
votes
1answer
849 views

Why use lxc instead of chroot?

One ubuntu server hosts 3 apps all on separate domains. Each app has its own developers. App developers belong to linux "sftp" group. chroot allows password sftp access for each app developer. ...
0
votes
1answer
147 views

Do any Unix/Linux FTP daemons allow users to be “jailed” without using chroot?

When setting up an FTP account for a specific purpose - e.g. as a drop-point for sharing data files - it seems sensible to give the user access only to the particular directory, and no view of a wider ...
0
votes
1answer
730 views

CentOS 6 restrict user ssh access to his home folder

I am trying to restrict a newly added user to his homedir /home/username. Don't want him to be able to cd out of it. I have this my sshd_config: Match User username ChrootDirectory %h ...
0
votes
1answer
79 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
113 views

Is it worth to use chroot when running web applications?

My setup: In production I'm using one virtual server per one web application shard. Shards are behind load balancer. In backstage we run web application + DB on a single virtual server. The ...
0
votes
1answer
354 views

Apache 2.2.4: problems chroot with modsecurity

I've been installed mod_security. If i simply include in the httpd the configuration files of mod_security, it starts normally. Indeed, if i try to add SecChrootDir /mnt/chr , httpd will start, but at ...
0
votes
0answers
77 views

PHP-FPM is not working as expected

I am using Debian Squeeze and set up PHP-FPM with fastcgi. I have several virtual hosts defined on the same host. I defined chroot for each pool configuration but somehow it is possible to change ...
1
vote
1answer
262 views

reseting password not working in KVM guest

I lost the root password for a guest system. I mounted the guest system and changed it to single user mode. Then I used virsh console to access the guest system, which was now in single user mode, ...
-5
votes
1answer
45 views

Process still running from a deleted chroot? [closed]

so I come to you with a somewhat interesting problem. I had a chroot running that had an entire lamp server installed and running on it. I tried to purge and remove the lamp server but messed up ...
2
votes
2answers
514 views

How to setup a public rsync and sftp server

I want to setup a public storage server which allows sftp and rsync (through ssh). I've got it working with a chroot jail and rssh. When the user connects to the server with sftp he can read all the ...
0
votes
1answer
886 views

Apache + PHP-FPM + chroot results “File not found.” error

I want to set chroot to the DocumentRoot using PHP-FPM pools' chroot attribute. With the settings below, whatever I do I get only a "File not found." error: /etc/php5/fpm/pool.d/example.conf ...