1
vote
1answer
2k views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory ...
0
votes
1answer
154 views

Mininet additional veth pair between host and server

For those who don’t know - Mininet is a tool that allows for the automated creation of multiple OVS switches, chroot linux ‘containers’ as hosts and links them all together to prototype OVS powered ...
0
votes
2answers
179 views

chroot: can't resolve domain names [closed]

i can't resolve domain names in chrooted environment - in the normal shell it works fine. i'm using plesk 11.5 and my chroot environment contains the following: ...
1
vote
0answers
99 views

Built in chroot jail RHEL 5 returns No such file or directory

I need to create a chroot jail on my RHEL5 production server to allow a specific user to work with the less right possible, but with GIT. Here is my system configuration : RHEL 5 : Release 5.10 ...
0
votes
1answer
84 views

How to create chroot jail with ability to change some system settings

How to properly create chroot jail (on Ubuntu, or some some other Linux if not applicable) to make user able to edit system settings (eg. with ifconfig) and be able to communicate with external ...
0
votes
1answer
407 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
0
votes
2answers
262 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
1
vote
1answer
448 views

Jailkit not locking down SFTP, working for SSH

I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root: mkdir /var/jail jk_init -j /var/jail ...
2
votes
2answers
683 views

Setting up a chroot sftp on debian server

I'm trying to allow a user "user" to access my server by either sftp or ssh. I want to jail them into a directory with chroot. I read the instructions here however it does not work. I did the ...
1
vote
0answers
726 views

PureFTPd : ChrootEveryone not working

I have a fresh install of Ubuntu 12.04 with pure-ftpd version 1.0.35-1. I don't use database for the only user I have (ftpuser1 - localuser), but I want to lock him into his home directory. ...
2
votes
1answer
3k views

ubuntu bind9 AppArmor read permission denied (chroot jail)

I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system I am getting the following errors in my syslog: Jul 27 ...
0
votes
1answer
156 views

how to make sure that Apache processes is chrooted?

I am using Apache 2 on Debian 6. I tried to make Apache by using following resource: http://www.debian.org/doc/manuals/securing-debian-howto/ap-chroot-apache-env.en.html how can i be sure that Apache ...
3
votes
2answers
111 views

How to create a link outside of the jail, but accessable within the jail?

I have created a chroot jail, but now I want to be able to create a link within the jail which links outside of the jail. Is this possible?
0
votes
1answer
583 views

setlocale error with chroot

I have created a chroot jail and when I log in I get a bash warning bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8) I tried to google the error, but wasn't able to find a ...
1
vote
1answer
128 views

How can I set a global sftp chroot for a group (or all) users on a server [duplicate]

Possible Duplicate: set up a chrooted SFTP login with OpenSSH I am not familiar with chroot jails so please forgive my ignorance. From my understanding you would normally chroot a user to ...
2
votes
2answers
215 views

Security of chroot and linux binaries

I'd like to verify the security of chroot and default programs in a linux distribution (say Ubuntu). Example: I set up jail directory 'A'. Every linux binary from the distribution is placed in 'A' ...
0
votes
1answer
468 views

How to get PHP mysql_ extension for linux chroot jail?

I've setup a chroot jail using jailkit on my Ubuntu 10.04 system. I've copied the binaries for php and mysql which all worked fine. So from the command line of my chrooted user I can run php ...
2
votes
1answer
601 views

jailkit chroot terminates ssh login

I've done my very best to follow these instructions to create a chroot shell. But the connection get's terminated every time I try to login via ssh for my new chrooted user. I start my ssh terminal, ...
0
votes
1answer
5k views

SSH Fails, /bin/bash: No such file or directory

I have a user who is jailed. sshd_config: Subsystem sftp internal-sftp Match user matt ChrootDirectory %h X11Forwarding no AllowTcpForwarding no passwd: matt:x:1001:5006:Matt ...
2
votes
1answer
365 views

Updating (and configuring) chroots on general purpose CentOS webserver with yum?

I'm currently providing web hosting on a shared web hosting VPS environment - that has no chroot. This is obviously a big security concern, although I've made sure that only the owners of files can ...
1
vote
2answers
980 views

vsftpd chroot_local_user does nothing

I'm setting up a vsftpd server on: Linux 2.6.32-26-server #48-Ubuntu SMP Wed Nov 24 10:28:32 UTC 2010 x86_64 GNU/Linux When I set chroot_local_user=YES, there is no effect (I can still see / when I ...
2
votes
1answer
907 views

Is it advisable to run Apache in a chroot jail?

I have been advised by a sysadmin guy I know, to run Apache in a chroot jail, for increased security. I have the following questions: Is this advisable (i.e. are there any 'gotcha's that I need to ...
0
votes
2answers
201 views

On Ubuntu, how to design a monitor to run a process when a file is written to a directory?

I want to run a process when a file is written to a directory on Ubuntu. I understand I can write a monitor to do this. (ie not an event based trigger but a 'monitor'). To implement this - other ...
2
votes
2answers
10k views

How to run tomcat6 on ubuntu as root?

I've got an existing software package that runs on Ubuntu that uses a chroot jail and so needs to be run as root. I want to exec this from a java web application running within Tomcat6 on Ubuntu, so ...
6
votes
5answers
4k views

Ubuntu - can non-root user run process in chroot jail?

Is it possible for a non-root user to run a chroot process on Ubuntu?