The chroot tag has no wiki summary.
0
votes
2answers
31 views
Ubuntu SFTP & Chrooting
I've been looking around for a few days now, playing around with configurations and following tutorials on this.
I Have two groups: dev and sftp.
Users within the dev group are also part of the ...
1
vote
0answers
22 views
HAProxy running in chroot jail is only logging started messages
I've configured my HAProxy server to run in a chroot jail logging messages to syslog socket. My problem is that the only messsages currently being logged are for when haproxy is starting up.
May 26 ...
0
votes
0answers
35 views
vsftpd chroot_local_user error
When I set chroot_local_user to YES in the vsftpd configuration, I get this error in my ftp client:
220: (vsFTPd 2.3.5)
Connected to 23.21.50.255.
Cmd: AUTH TLS
234: Proceed with negotiation.
Cmd: ...
0
votes
1answer
43 views
Bind9 chroot needed if use of apparmor nodays?
I'm redoing my external dns servers and thinking about skipping chroot this time.
And using apparmor or selinux as an alternativen. Any thoughts?
I'm using team cymrus bind template as ..template :)
...
0
votes
1answer
65 views
Chroot SFTP Users
I have an Ubuntu Server, where several users log in to upload some files. Each user has a home directory, in which I 'd like to be chrooted.
e.g. user1 connects with sftp to the server and is ...
1
vote
1answer
45 views
chrooting an application
I have an requirement that requires all applications running on a server in a DMZ to be chrooted. How does one chroot an application using Ubuntu? Are there any good online guides?
0
votes
1answer
101 views
Cron, chroot, jails, and permissions
I'm trying to grasp how to run crons under chrooted users.
I'm on Ubuntu, and using ISPConfig where I can.
I created a cronjob in ISPConfig which resulted in a file /etc/cron.d/ispc_chrooted_web1 ...
1
vote
1answer
42 views
is doing mount -t proc none /proc unsecure for a chroot environment?
What does
mount -t proc none /proc
do inside the chrooted environment?
After doing that, when I run htop or ps aux inside the chrooted environment, I can see the actual root's processes.
Does it ...
2
votes
1answer
121 views
Defining hard links in puppet
Is there a way to define hardlinks inside puppet manifest?
It seems file type can only define symbolic links, but I need it to be hard links in order to make some of my chrooted applications to work. ...
1
vote
2answers
348 views
chrooting php-fpm with nginx
I'm setting up a new server with PHP 5.3.9 and nginx, so I compiled PHP with the php-fpm SAPI options. By itself it works great using the following server entry in nginx:
server {
listen 80;
...
1
vote
2answers
38 views
How to create a link outside of the jail, but accessable within the jail?
I have created a chroot jail, but now I want to be able to create a link within the jail which links outside of the jail. Is this possible?
0
votes
1answer
80 views
setlocale error with chroot
I have created a chroot jail and when I log in I get a bash warning bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
I tried to google the error, but wasn't able to find a ...
0
votes
1answer
93 views
Implications that come with chrooting php-fpm
I am creating a production server that will run nginx with php-fpm. I want to have a good mix between securing the server, and still having good quick workflow.
Now one thing that always secures the ...
0
votes
1answer
378 views
PHP-FPM's chroot and chdir directory
I am setting up php-fpm with chrooting enabled. Now I see that there are two options, and I want to know what the exact difference is.
The setup has:
chroot = /var/www/domains/domain.tld/
; Chdir to ...
0
votes
4answers
300 views
Prevent rssh users from leaving their jail directories
I'm attempting to use rssh to jail users strictly to their /home/user/public_html dirctories.
I got it to work where an account can SFTP into the system successfully on a test server, but once I login ...
0
votes
1answer
47 views
Recommended permission settings for web developers
I'm in charge of administering a WWW linux server at work.
I have a team of web developers which need to work on a specific directory (let's say /var/www/website). Every developer should be able to ...
1
vote
0answers
69 views
Creating a chroot template, Mysqld don't lauch on copies
I create a chroot using dbootstrap
sudo debootstrap --arch i386 squeeze template http://ftp.fr.debian.org/debian
I can lauch mysqld on this chroot, but if I copy the template directory, mysqld ...
1
vote
1answer
116 views
Executing command inside a chroot from an apache/php script
I need to unit test some bash scripts, I have setup a debian squeeze in a chroot.
From command line I can use chroot /directory my-command, ou schroot -d / -u root my-command, but I need to run ...
0
votes
0answers
222 views
ISPConfig 3 Jailkit 2.14 … no ssh
I've hooked up an ISPConfig server with a fresh debian 6 installation following the dovecot instructions... I just need a server that works... I have no time for a custom one :P don't judge me.
Well ...
0
votes
1answer
295 views
Chroot jail of Nginx and php
I'm hosting multiple websites on one VPS, and want to chroot each website, eg. /chroot/website1 /chroot/website2
I'm using makejail, which is a highlevel tool, for creating the jails, and copying the ...
0
votes
2answers
133 views
How to disable PHP's ini_set for specific configuration options?
I'm running a setup with PHP 5.3.8 and use php-fpm with it's chroot functionality to separate multiple customers. So each customer has it's own chrooted PHP-environment, which is quite fine.
I now ...
0
votes
1answer
48 views
Support needed creating Dovecot listener on Debian ( postfix)
I would like to create a dovecot lmtp listener under /var/spool/postfix/private/.
Because postfix runs chrooted by default under debian.
How can I do this?
Grtz
1
vote
0answers
197 views
Setup secure shared hosting (Apache, PHP, MySQL)
So I'm setting up a shared hosting with Apache, PHP, MySQL and the biggest question mark is how to do with PHP, since there is a million options out there how to configure it securely.
The plan is:
...
2
votes
1answer
188 views
Jail User to /var/www/username Directory via SSH
I have multiple folders in /var/www for different websites -- Apache uses name-based Virtual Hosts (Ubuntu Server). Suppose I want to allow someone to access their /var/www/user directory, but not cd ...
0
votes
0answers
65 views
Setting up chrooted ssh access with Openssh_5.9p1
Lately I upgraded my SSH server to OpenSSH_5.9p1 and tried to setup chrooted SFTP/SSH. So far I managed to setup chrooted access only for SFTP using new feature of openssh5.9p1:
Match User testuser
...
1
vote
1answer
89 views
How can I set a global sftp chroot for a group (or all) users on a server
I am not familiar with chroot jails so please forgive my ignorance.
From my understanding you would normally chroot a user to their home directory - ex: /home/username.
I would like to chroot all ...
0
votes
1answer
283 views
Chroot In .bashrc For User; Operation Not Permitted
I am trying to chroot a user when they login with ssh. So, what I did is added the following line to their .bashrc file:
chroot /apps/web
When I login with the user though, I am getting:
chroot: ...
0
votes
2answers
105 views
How To Create Users Who Are Chrooted At A Directory
Is it possible to have users on linux, who's home directory is still the default /home/joe but when they login via ssh/sftp, they are chroot at /apps/web/?
Basically I wanted to keep all users files ...
1
vote
2answers
162 views
bind9 in a chroot jail - necessary or not?
I always used to keep my bind9 installation in a chroot jail. Now I upgraded my vServer and have to install bind9 over again. Due to the virtualization solution my hosting provider uses, I cannot ...
0
votes
1answer
679 views
VSFTPD - Change User Home Directory
I need to update a ftp user's home directory. Could I run the userdel command then re-add the user without losing the directory the user was attached to? Or is there another way to change the user's ...
1
vote
3answers
282 views
Unmounting root filesystem without rebooting the server
I have a server that I can access through SSH. There is no KVM available and there's only one root partition for the whole server.
I have deleted some files that I shouldn't have and want to recover ...
0
votes
0answers
107 views
Secure PHP environments with PHP-FPM and SFTP
I'd like to set up secure environments for a small number of untrusted PHP websites on a Debian server. Right now everything runs on the same Apache2 with mod_php5 and vsftpd for administrative file ...
4
votes
2answers
363 views
schroot fails to mount on entry
I'm trying to setup a chroot environment for myself, and it is failing. This has been reproduced on multiple versions (10.04 and 11.04) of Ubuntu. I set it up by doing:
$ mkdir -p ...
0
votes
0answers
661 views
Chroot w/ rssh doesn't work when sftp user tries to login
System: CentOS 5.x VPS
I am trying to configure a chroot environment with rssh. I have added the user with "useradd" specifying its home directory as the chroot environment (/var/www/sage). I have ...
0
votes
1answer
250 views
Share multiple directories to ftp users
I have multiple directories spread over the file systems of multiple Ubuntu 10.04 servers.
The requirements are to allow a handful of people access a few of these directories over ftp.
For example ...
0
votes
1answer
63 views
Jail CentOS group to single dir (and dir's within) - FTP
What I am ultimately looking to do is jail a group of users to only be able to FTP into their home folder. They should be able to have r&w capabilities within their home folder, and within ALL ...
2
votes
1answer
546 views
Increasing permissiveness/permissions for umask + openssh + chrooted SFTP server using internal-sftp
The suggestion found at these links works for me:
How to setup ssh's umask for all type of connections
http://ubuntuforums.org/showthread.php?t=1107974#5
Summary: Use PAM to inject the umask, ...
1
vote
2answers
620 views
Trying to setup chroot'd rsync
I'm trying to set up a backup server.
I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync.
I quickly discovered that I was not the only one trying to do ...
0
votes
0answers
220 views
“Connection closed” in chrooted sftp when using sssd on Ubuntu 10.04
I am running Ubuntu 10.04 and I'm trying to add an sftp-only user to log in using public key authentication.
My sshd_config has the following configuration:
Subsystem sftp internal-sftp
Match Group ...
1
vote
4answers
357 views
Restrict users to their home directory
How do I restrict the user to his current directory only?
I tried the steps mentioned on this page to configure rssh chroot jail to lock users to their home directories only, but this looks too ...
1
vote
2answers
228 views
When is it not worth putting Apache in a chroot jail?
I don't mean to question the well established security precaution of putting apache in a chroot-jail in most scenarios but in my scenario I have doubts.
We have a virtual server hosting a single ...
0
votes
1answer
256 views
How to create virtual users in vsftpd?
I am running vsftpd on my Debian squeeze server. I configured it to chroot local users into their /home/ directory. Now, the problem is that users' web pages are outside of their /home/ directories ...
2
votes
1answer
192 views
Debian: ip/network changes within chroot/jail
I've Debian Squeeze running and setup a chroot environment (/jail) with debootstrap.
As seen in a tutorial, I mounted the following:
proc on /jail/proc type proc (rw)
devpts on /jail/dev/pts type ...
1
vote
1answer
87 views
Security implications of mount --bind in a chroot environment
Assume you have a chroot environment where you need a resource - an application or a library - which resides on the host (external to the chroot).
Which are the security implications (if any) of ...
1
vote
1answer
108 views
Is there an equivalent of ToLower for a vsftpd.conf?
I am running a vsFTP server using virtual users. I chroot each user to their own personal subdirectory. For ease of use I would like to make my usernames case-insensitive, but I am having some ...
4
votes
3answers
1k views
Why is “chroot” never used on Mac OS X?
I've been using Macs for 25 years, and "UNIX" since OS X 10.0.. but I've never really thought much about chroot, nor have I ever really needed or wanted to...
It's a simple question, but... under ...
2
votes
2answers
95 views
Security of chroot and linux binaries
I'd like to verify the security of chroot and default programs in a linux distribution (say Ubuntu).
Example:
I set up jail directory 'A'. Every linux binary from the distribution is placed in 'A' ...
0
votes
1answer
160 views
How to get PHP mysql_ extension for linux chroot jail?
I've setup a chroot jail using jailkit on my Ubuntu 10.04 system. I've copied the binaries for php and mysql which all worked fine. So from the command line of my chrooted user I can run php ...
0
votes
2answers
939 views
OpenSSH 5.3 setting UMASK for SFTP chroot env, dosen't work at all
I tried to override umask setting on SFTP connection in chrooted env.
I couldnt use subsytem diffrente than internal-ftp.
In OpenSSH_5.3p1 (Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009)
there's umask ...
1
vote
2answers
546 views
sftp chrooted dosent work with some sftp client (Cyberduck)
I'm not able working on SFTP+chrooted env
Using internal-sftp directive it works, but i'm not able to set umask. (ex umask 002)
Using sftp-server from openssh package dosent't work because login shell ...
