The chroot tag has no wiki summary.
2
votes
1answer
69 views
Defining hard links in puppet
Is there a way to define hardlinks inside puppet manifest?
It seems file type can only define symbolic links, but I need it to be hard links in order to make some of my chrooted applications to work. ...
1
vote
1answer
50 views
chrooting php-fpm with nginx
I'm setting up a new server with PHP 5.3.9 and nginx, so I compiled PHP with the php-fpm SAPI options. By itself it works great using the following server entry in nginx:
server {
listen 80;
...
-1
votes
0answers
28 views
wkhtmltopdf hosted - security issues
What's, in your opinion, best pratice, to let wkhtmltopdf installed on a server be accessed as a service? (E.g. with an REST Interface via apache/php)
It seems rather insecure to simply pass ...
1
vote
2answers
33 views
How to create a link outside of the jail, but accessable within the jail?
I have created a chroot jail, but now I want to be able to create a link within the jail which links outside of the jail. Is this possible?
0
votes
1answer
22 views
setlocale error with chroot
I have created a chroot jail and when I log in I get a bash warning bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
I tried to google the error, but wasn't able to find a ...
0
votes
0answers
70 views
Servers running from chrooted Ubuntu on HP TouchPad? [closed]
The problem: servers appear to be broken inside my Ubuntu chroot. No matter what kind of server I try to run, they all seem unresponsive (VLC server won't respond to client, mkRemote doesn't move the ...
0
votes
1answer
41 views
Implications that come with chrooting php-fpm
I am creating a production server that will run nginx with php-fpm. I want to have a good mix between securing the server, and still having good quick workflow.
Now one thing that always secures the ...
0
votes
1answer
98 views
PHP-FPM's chroot and chdir directory
I am setting up php-fpm with chrooting enabled. Now I see that there are two options, and I want to know what the exact difference is.
The setup has:
chroot = /var/www/domains/domain.tld/
; Chdir to ...
0
votes
4answers
113 views
Prevent rssh users from leaving their jail directories
I'm attempting to use rssh to jail users strictly to their /home/user/public_html dirctories.
I got it to work where an account can SFTP into the system successfully on a test server, but once I login ...
0
votes
1answer
35 views
Recommended permission settings for web developers
I'm in charge of administering a WWW linux server at work.
I have a team of web developers which need to work on a specific directory (let's say /var/www/website). Every developer should be able to ...
1
vote
0answers
33 views
Creating a chroot template, Mysqld don't lauch on copies
I create a chroot using dbootstrap
sudo debootstrap --arch i386 squeeze template http://ftp.fr.debian.org/debian
I can lauch mysqld on this chroot, but if I copy the template directory, mysqld ...
1
vote
1answer
60 views
Executing command inside a chroot from an apache/php script
I need to unit test some bash scripts, I have setup a debian squeeze in a chroot.
From command line I can use chroot /directory my-command, ou schroot -d / -u root my-command, but I need to run ...
0
votes
0answers
97 views
ISPConfig 3 Jailkit 2.14 … no ssh
I've hooked up an ISPConfig server with a fresh debian 6 installation following the dovecot instructions... I just need a server that works... I have no time for a custom one :P don't judge me.
Well ...
0
votes
1answer
137 views
Chroot jail of Nginx and php
I'm hosting multiple websites on one VPS, and want to chroot each website, eg. /chroot/website1 /chroot/website2
I'm using makejail, which is a highlevel tool, for creating the jails, and copying the ...
0
votes
2answers
74 views
How to disable PHP's ini_set for specific configuration options?
I'm running a setup with PHP 5.3.8 and use php-fpm with it's chroot functionality to separate multiple customers. So each customer has it's own chrooted PHP-environment, which is quite fine.
I now ...
0
votes
1answer
32 views
Support needed creating Dovecot listener on Debian ( postfix)
I would like to create a dovecot lmtp listener under /var/spool/postfix/private/.
Because postfix runs chrooted by default under debian.
How can I do this?
Grtz
0
votes
0answers
104 views
Setup secure shared hosting (Apache, PHP, MySQL)
So I'm setting up a shared hosting with Apache, PHP, MySQL and the biggest question mark is how to do with PHP, since there is a million options out there how to configure it securely.
The plan is:
...
2
votes
1answer
118 views
Jail User to /var/www/username Directory via SSH
I have multiple folders in /var/www for different websites -- Apache uses name-based Virtual Hosts (Ubuntu Server). Suppose I want to allow someone to access their /var/www/user directory, but not cd ...
0
votes
0answers
34 views
Does OpenSSH_5.9p1 support Chrooted SSH?
Lately i upgraded my SSH server with OpenSSH_5.9p1 and tried to setup chrooted SFTP/SSH. So far i managed to setup chrooted access only for SFTP using new feature of openssh5.9p1:
Match User testuser ...
1
vote
1answer
73 views
How can I set a global sftp chroot for a group (or all) users on a server
I am not familiar with chroot jails so please forgive my ignorance.
From my understanding you would normally chroot a user to their home directory - ex: /home/username.
I would like to chroot all ...
0
votes
1answer
160 views
Chroot In .bashrc For User; Operation Not Permitted
I am trying to chroot a user when they login with ssh. So, what I did is added the following line to their .bashrc file:
chroot /apps/web
When I login with the user though, I am getting:
chroot: ...
0
votes
2answers
64 views
How To Create Users Who Are Chrooted At A Directory
Is it possible to have users on linux, who's home directory is still the default /home/joe but when they login via ssh/sftp, they are chroot at /apps/web/?
Basically I wanted to keep all users files ...
1
vote
2answers
110 views
bind9 in a chroot jail - necessary or not?
I always used to keep my bind9 installation in a chroot jail. Now I upgraded my vServer and have to install bind9 over again. Due to the virtualization solution my hosting provider uses, I cannot ...
0
votes
1answer
351 views
VSFTPD - Change User Home Directory
I need to update a ftp user's home directory. Could I run the userdel command then re-add the user without losing the directory the user was attached to? Or is there another way to change the user's ...
1
vote
3answers
251 views
Unmounting root filesystem without rebooting the server
I have a server that I can access through SSH. There is no KVM available and there's only one root partition for the whole server.
I have deleted some files that I shouldn't have and want to recover ...
0
votes
0answers
82 views
Secure PHP environments with PHP-FPM and SFTP
I'd like to set up secure environments for a small number of untrusted PHP websites on a Debian server. Right now everything runs on the same Apache2 with mod_php5 and vsftpd for administrative file ...
4
votes
2answers
272 views
schroot fails to mount on entry
I'm trying to setup a chroot environment for myself, and it is failing. This has been reproduced on multiple versions (10.04 and 11.04) of Ubuntu. I set it up by doing:
$ mkdir -p ...
0
votes
0answers
430 views
Chroot w/ rssh doesn't work when sftp user tries to login
System: CentOS 5.x VPS
I am trying to configure a chroot environment with rssh. I have added the user with "useradd" specifying its home directory as the chroot environment (/var/www/sage). I have ...
0
votes
1answer
176 views
Share multiple directories to ftp users
I have multiple directories spread over the file systems of multiple Ubuntu 10.04 servers.
The requirements are to allow a handful of people access a few of these directories over ftp.
For example ...
0
votes
1answer
48 views
Jail CentOS group to single dir (and dir's within) - FTP
What I am ultimately looking to do is jail a group of users to only be able to FTP into their home folder. They should be able to have r&w capabilities within their home folder, and within ALL ...
0
votes
1answer
380 views
Increasing permissiveness/permissions for umask + openssh + chrooted SFTP server using internal-sftp
The suggestion found at these links works for me:
How to setup ssh's umask for all type of connections
http://ubuntuforums.org/showthread.php?t=1107974#5
Summary: Use PAM to inject the umask, ...
1
vote
2answers
346 views
Trying to setup chroot'd rsync
I'm trying to set up a backup server.
I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync.
I quickly discovered that I was not the only one trying to do ...
0
votes
0answers
183 views
“Connection closed” in chrooted sftp when using sssd on Ubuntu 10.04
I am running Ubuntu 10.04 and I'm trying to add an sftp-only user to log in using public key authentication.
My sshd_config has the following configuration:
Subsystem sftp internal-sftp
Match Group ...
1
vote
4answers
257 views
Restrict users to their home directory
How do I restrict the user to his current directory only?
I tried the steps mentioned on this page to configure rssh chroot jail to lock users to their home directories only, but this looks too ...
1
vote
2answers
187 views
When is it not worth putting Apache in a chroot jail?
I don't mean to question the well established security precaution of putting apache in a chroot-jail in most scenarios but in my scenario I have doubts.
We have a virtual server hosting a single ...
0
votes
1answer
228 views
How to create virtual users in vsftpd?
I am running vsftpd on my Debian squeeze server. I configured it to chroot local users into their /home/ directory. Now, the problem is that users' web pages are outside of their /home/ directories ...
2
votes
1answer
153 views
Debian: ip/network changes within chroot/jail
I've Debian Squeeze running and setup a chroot environment (/jail) with debootstrap.
As seen in a tutorial, I mounted the following:
proc on /jail/proc type proc (rw)
devpts on /jail/dev/pts type ...
1
vote
1answer
69 views
Security implications of mount --bind in a chroot environment
Assume you have a chroot environment where you need a resource - an application or a library - which resides on the host (external to the chroot).
Which are the security implications (if any) of ...
1
vote
1answer
71 views
Is there an equivalent of ToLower for a vsftpd.conf?
I am running a vsFTP server using virtual users. I chroot each user to their own personal subdirectory. For ease of use I would like to make my usernames case-insensitive, but I am having some ...
4
votes
3answers
987 views
Why is “chroot” never used on Mac OS X?
I've been using Macs for 25 years, and "UNIX" since OS X 10.0.. but I've never really thought much about chroot, nor have I ever really needed or wanted to...
It's a simple question, but... under ...
2
votes
2answers
80 views
Security of chroot and linux binaries
I'd like to verify the security of chroot and default programs in a linux distribution (say Ubuntu).
Example:
I set up jail directory 'A'. Every linux binary from the distribution is placed in 'A' ...
0
votes
1answer
120 views
How to get PHP mysql_ extension for linux chroot jail?
I've setup a chroot jail using jailkit on my Ubuntu 10.04 system. I've copied the binaries for php and mysql which all worked fine. So from the command line of my chrooted user I can run php ...
0
votes
2answers
706 views
OpenSSH 5.3 setting UMASK for SFTP chroot env, dosen't work at all
I tried to override umask setting on SFTP connection in chrooted env.
I couldnt use subsytem diffrente than internal-ftp.
In OpenSSH_5.3p1 (Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009)
there's umask ...
1
vote
2answers
374 views
sftp chrooted dosent work with some sftp client (Cyberduck)
I'm not able working on SFTP+chrooted env
Using internal-sftp directive it works, but i'm not able to set umask. (ex umask 002)
Using sftp-server from openssh package dosent't work because login shell ...
2
votes
1answer
216 views
jailkit chroot terminates ssh login
I've done my very best to follow these instructions to create a chroot shell. But the connection get's terminated every time I try to login via ssh for my new chrooted user.
I start my ssh terminal, ...
0
votes
1answer
750 views
SSH Fails, /bin/bash: No such file or directory
I have a user who is jailed.
sshd_config:
Subsystem sftp internal-sftp
Match user matt
ChrootDirectory %h
X11Forwarding no
AllowTcpForwarding no
passwd:
matt:x:1001:5006:Matt ...
0
votes
1answer
55 views
How can I setup a one-way scp?
I am trying to setup a remote host to act as a data sink, i.e. some kind of environment on the remote host, A, which allows users to scp data from their local machine to A but not from A to their ...
2
votes
3answers
659 views
How to chroot Apache on CentOS?
I have been advised by a sysadmin, to run Apache in a chroot jail, in order to prevent that an attacker could take control of server.
So my question is:
What is the best method to chroot ...
1
vote
1answer
99 views
Updating (and configuring) chroots on general purpose CentOS webserver with yum?
I'm currently providing web hosting on a shared web hosting VPS environment - that has no chroot. This is obviously a big security concern, although I've made sure that only the owners of files can ...
0
votes
2answers
415 views
Pure-FTPD chroot not working on a fresh Debian install?
I am trying to get chroot to work with virtual Pure-FTPD users, but for some reason it simply is not working.
I changed the following options:
/etc/default/pure-ftpd-common:
VIRTUALCHROOT=true
...
