1
vote
2answers
404 views

Chrooted SFTP user - Write permission denied even for owner

On CentOS release 6.5 (Final) I created a restricted user test1 useradd -s /bin/false test1 and configured ssd_config as following Subsystem sftp internal-sftp Match User test1 ...
1
vote
1answer
202 views

Chroot issue, broken pipe

I need to give access to a developer to our server vía ssh. I hosted his web on /home/miuser and some other web applications in /home/... I have this config in my Subsystem sftp internal-sftp Match ...
5
votes
2answers
528 views

Why chroot is considered insecure?

I've been playing around with CentOS box for couple of years now. So I'm pretty comfy with terminal. However, I read a lot of blog-post claiming that chroot is insecure and amount of those posts ...
1
vote
1answer
409 views

Jailkit not locking down SFTP, working for SSH

I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root: mkdir /var/jail jk_init -j /var/jail ...
5
votes
4answers
418 views

Is there a chroot build script somewhere?

I am about to develop a little script to gather information for a chroot-jail. In my case this looks (at the first glance) pretty simple: The application has a clean rpm-install and did install ...
0
votes
2answers
4k views

chrooting user causes “connection closed” message when using sftp

First off I am a linux newbie so please don't assume much knowledge. I am using CentOS 5.8 (final) and using OpenSSH version 5.8p1. I have made a user playwithbits and I am attempting to chroot them ...
1
vote
1answer
639 views

HAProxy running in chroot jail is only logging started messages

I've configured my HAProxy server to run in a chroot jail logging messages to syslog socket. My problem is that the only messsages currently being logged are for when haproxy is starting up. May 26 ...
3
votes
1answer
6k views

VSFTPD - Change User Home Directory

I need to update a ftp user's home directory. Could I run the userdel command then re-add the user without losing the directory the user was attached to? Or is there another way to change the user's ...
0
votes
1answer
121 views

Jail CentOS group to single dir (and dir's within) - FTP

What I am ultimately looking to do is jail a group of users to only be able to FTP into their home folder. They should be able to have r&w capabilities within their home folder, and within ALL ...
1
vote
4answers
864 views

Restrict users to their home directory

How do I restrict the user to his current directory only? I tried the steps mentioned on this page to configure rssh chroot jail to lock users to their home directories only, but this looks too ...
3
votes
3answers
2k views

How to chroot Apache on CentOS?

I have been advised by a sysadmin, to run Apache in a chroot jail, in order to prevent that an attacker could take control of server. So my question is: What is the best method to chroot ...
2
votes
2answers
2k views

Access files outside a chroot'ed environment?

I need to setup some users to access our server. I thought the most secure way to allow them access was to setup a chroot'ed jail for them to log into. But I need them to access a few select ...
1
vote
2answers
297 views

CHROOT for shell script testing

I am looking at setting up a shell script in order to properly document and automate the process I am using to setup a few servers we have. In order to test the shell script through its different ...
1
vote
3answers
846 views

Is there an equivalent to MySecureShell for Centos?

I have some issue to install MySecureShell on CentOS 5.4 because I want to use Yum to install it (for maintainability). I get this error : yum install mysecureshell Error: Missing Dependency: ...
0
votes
1answer
990 views

What is the easiest and cleanest way to create a chrooted SFTP on Centos 5.4?

I would like to setup a SFTP with chroot (or equivalent) login to my Centos 5.4 server in a clean way. By clean way I mean by using only the YUM command if possible and with something easy to maintain ...
2
votes
2answers
1k views

Is MySecureShell a good way to manage SFTP user with chroot on a Centos Server?

I need to setup my Centos 5.4 server for SFTP with chrooted access only (or equivalent). The regular solution using RSSH find here : ...
2
votes
1answer
1k views

Is there an available repository to update OpenSSH to 4.8+ on Centos 5.4?

I need OpenSSH 4.8+ in order to do setup a clean chrooted SFTP on my Centos 5.4 with Remi and EPEL repositories. Is there a repository for Centos which contain an updated OpenSSH? Thanks! Extra ...
0
votes
1answer
2k views

Chroot with CentOS 5.3 + openssh 4.3p2

OS: CentOS 5.3, with openssh 4.3p2 Trying to set 'chroot' in ssh shell, but openssh version prior to 4.8 doesn't take below settings. yum update openssh open up to version 4.3 which is quite old. ...
0
votes
2answers
321 views

Chroot within chroot

I'm using Centos 5.2 and when I try to make a chroot jail using the script, I get: Copying libraries for /usr/bin/scp. (0x00007fff17bfe000) cp: cannot stat `(0x00007fff17bfe000)': No such file or ...