The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
18 views

sftp server chroot initial directory

I have configured an sftp server with chroot and it works fine, the only thing that is bothering me is the initial landing directory, since the sftp user does not have write permissions in the landing ...
-1
votes
0answers
21 views

chroot unable to write in home directory

I had a requirement on Centos5 to jail sftp users only to see their home directory during the sftp operations, so I performed the steps narrated in Enabled chroot as follows: section, which eventually ...
0
votes
1answer
50 views

What is the best method of installing programs into a chroot / jail?

On a Debian based system... I have created a minimal chroot/jail using a script similar to the one at https://github.com/pmenhart/make_chroot_jail/blob/master/make_chroot_jail.sh with the goal of ...
0
votes
1answer
13 views

Restrict SFTP folder with PHP permisions

I want an user to have access to /var/www/domain.com/public_html so I followed this tutorials, but with my modifications so I can have my users upload directly to their domains: ...
0
votes
0answers
75 views

SFTP chroot jail not working

Trying to follow this tutorial but for Arch Linux. /etc/ssh/sshd_config: # override default of no subsystems #Subsystem sftp /usr/lib/ssh/sftp-server Subsystem sftp internal-sftp ...
0
votes
0answers
62 views

Bad File Descriptor when trying to use SFTP with chroot

I am on CentOS 6.5 using OpenSSH_5.3p1. I have attempted to set-up a chroot environment. After connecting using SFTP, when I use the 'ls' command, the connection is closed. The following is being ...
1
vote
0answers
189 views

CentOS 6.5 ssh ChrootDirectory not working

I have been trying to configure my CentOS 6.5 minimal 64 bit machine to allow SFTP users to connect and get jailed to specific folders. I can sftp in using the unix commmand: "sftp user@localhost" and ...
0
votes
2answers
106 views

Trying to ChrootDirectory an SFTP user to their home directory

I have followed a few examples of how to do this, all of them end up with modifying sshd_config to Subsystem sftp internal-sftp Match User chubbyninja ChrootDirectory %h AllowTCPForwarding ...
2
votes
5answers
507 views

How secure is SSH ForceCommand on a jump host?

I have the following setup in my network: Internet <--> Bastion <--> Local Network I have several users and each user is assigned to a specific machine. Or in other words: Each user ...
0
votes
1answer
135 views

How to keep jailed users from changing directory to parent dirs?

I've chroot users with chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and I'm the only user in the chroot_list file. Other users log in jailed but when they ...
2
votes
1answer
87 views

Home/end keys are not working correctly in the bash CLI for a jailed user using PuTTY

I'm using PuTTY to access my U14.04 LTS server via SSH. When I log in using my main account, the number pad keys work fine in the BASH CLI. When I log in to a user who's been jailed using Jailkit, ...
6
votes
2answers
16k views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory ...
2
votes
1answer
6k views

500 OOPS: vsftpd: refusing to run with writable root inside chroot() Login failed on debian

I install vsftpd for running FTP server on debian 7.3. I checked vsftpd version was 2.3.5 and i configure it like so: listen=YES local_enable=YES write_enable=YES chroot_local_user=YES ...
0
votes
1answer
323 views

Mininet additional veth pair between host and server

For those who don’t know - Mininet is a tool that allows for the automated creation of multiple OVS switches, chroot linux ‘containers’ as hosts and links them all together to prototype OVS powered ...
0
votes
0answers
33 views

Jailkit Process Reading Restriction

I have created a chroot jail using jailkit, all works fine so far except that the jailed user can see all running process's with the ps -A command. I want the ps command available to the jailed user ...
0
votes
0answers
534 views

Chroot master process Nginx 1.2.1

I want to install nginx not current stable version but in one currently deposits, and chroot the process. I followed some tutorials including: Securing Debian Manual Appendix H - Chroot environment ...
0
votes
2answers
435 views

chroot: can't resolve domain names [closed]

i can't resolve domain names in chrooted environment - in the normal shell it works fine. i'm using plesk 11.5 and my chroot environment contains the following: ...
1
vote
1answer
81 views

SSH : Restrict sftp to a directory without jailing shell

For a user group I'd like to: Restrict SFTP access to a given directory Use a custom shell for TTY which takes care of only exposing what needs to be exposed from the system but that still need ...
1
vote
1answer
322 views

lock ftp user in home directory

I have read, researched, tested, and still cannot seem to get this working correctly. I am running VSFTPD on Debian. With a test account configured to point the user's home directory to a mount point ...
1
vote
0answers
140 views

Built in chroot jail RHEL 5 returns No such file or directory

I need to create a chroot jail on my RHEL5 production server to allow a specific user to work with the less right possible, but with GIT. Here is my system configuration : RHEL 5 : Release 5.10 ...
0
votes
1answer
148 views

How to create chroot jail with ability to change some system settings

How to properly create chroot jail (on Ubuntu, or some some other Linux if not applicable) to make user able to edit system settings (eg. with ifconfig) and be able to communicate with external ...
0
votes
1answer
137 views

How to prevent non-chroot user access to system files

My FTP Server has 5 Users namely user01,user02,user03,user04,user05. Shared Folder /home/ftpusers Inside the folder... /home/ftpusers/user01 /home/ftpusers/user02 ...
0
votes
2answers
94 views

Need help having a particular setup for vsftp with virtual users with access to a particular folder

as part of some services we are offering to some companies, we have gradually became the hosting providers for them using amazon services. so we host 2 web sites on amazon. the root documents for the ...
1
vote
2answers
178 views

Easiest way to keep users in their home directory on a web server

I was wondering what would be the easiest and most secured way on a web server to prevent users from browsing directories other than their home folder. I have a mutualised web server with several ...
1
vote
0answers
189 views

SFTP OpenSSH 5.3 chroot-jail with write access to home directory

I've followed the myriad of tutorials/instructions to setup a CHROOT'ed/Jailed SFTP account, and it works great. However, I need the user accounts to be able to have full write access to their home ...
0
votes
1answer
1k views

cygwin sftp chroot cannot view contents of bound mountpoint

I'm trying to give user2 access only to his home directory and full permissions on /cygdrive/e. I created a Data/ directory within his $home, added a bind directive in /etc/fstab (see below), and ...
0
votes
1answer
538 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
-1
votes
3answers
5k views

Chroot jail not working with VSFTPD

I have been trying for ages to get this to work, to no avail. I have a VSFTPD server running on Arch. It works fine EXCEPT that users can navigate up the directory tree and view/download files in ...
1
vote
2answers
434 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
0
votes
1answer
887 views

Unable to setup git with jailed user

I have performed below steps to setup jailed user here username is test3 mkdir -p /home/test3/{dev,etc,lib,usr,bin} mkdir -p /home/test3/usr/bin chown root.test3 /home/test3 mknod -m 666 ...
1
vote
1answer
841 views

Jailkit not locking down SFTP, working for SSH

I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root: mkdir /var/jail jk_init -j /var/jail ...
2
votes
3answers
983 views

Setting up a chroot sftp on debian server

I'm trying to allow a user "user" to access my server by either sftp or ssh. I want to jail them into a directory with chroot. I read the instructions here however it does not work. I did the ...
0
votes
2answers
91 views

Crossplatform “jail” for an application

We currently have a variety of systems (Linux, Solarix, *BSD, HP-UX ...) on which we are not allowed to install anything into / (but I have root access. That's strange, I know). But we'd like to run ...
1
vote
0answers
874 views

PureFTPd : ChrootEveryone not working

I have a fresh install of Ubuntu 12.04 with pure-ftpd version 1.0.35-1. I don't use database for the only user I have (ftpuser1 - localuser), but I want to lock him into his home directory. ...
0
votes
1answer
583 views

adding ChrootDirectory to sshd_config to jail a user prevents the user to login

i've created an user on ubuntu 10.04 and wanted to jail the user by disabling ssh shell and allow sftp. when there is no ChrootDirectory in the sshd_config the user can login just that it can see ...
1
vote
2answers
322 views

vsftpd and home directories of chrooted local users

NOTE: Users are chrooted and their local_root is set to /srv/ftp. Why vsftpd forces local chrooted users to have home directory? It will refuse to work if there is not any. And I've found the ...
2
votes
3answers
4k views

ubuntu bind9 AppArmor read permission denied (chroot jail)

I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system I am getting the following errors in my syslog: Jul 27 ...
0
votes
1answer
177 views

how to make sure that Apache processes is chrooted?

I am using Apache 2 on Debian 6. I tried to make Apache by using following resource: http://www.debian.org/doc/manuals/securing-debian-howto/ap-chroot-apache-env.en.html how can i be sure that Apache ...
0
votes
1answer
995 views

Extend Jailkit with command [closed]

I am running ISPConfig 3 using Jailkit on my server and need to add mercurial to all existing and new jailkit account. From what I understand, it will only be applied for new users.. how can I add ...
2
votes
1answer
1k views

How to run easy_install and pip without root, without virtualenv?

People have access to servers as normal users (jailed actually), and they're advised - at the moment - to download whatever python packages they need, setup.py build them, then add their location to ...
3
votes
2answers
123 views

How to create a link outside of the jail, but accessable within the jail?

I have created a chroot jail, but now I want to be able to create a link within the jail which links outside of the jail. Is this possible?
1
vote
1answer
947 views

setlocale error with chroot

I have created a chroot jail and when I log in I get a bash warning bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8) I tried to google the error, but wasn't able to find a ...
1
vote
1answer
137 views

How can I set a global sftp chroot for a group (or all) users on a server [duplicate]

Possible Duplicate: set up a chrooted SFTP login with OpenSSH I am not familiar with chroot jails so please forgive my ignorance. From my understanding you would normally chroot a user to ...
3
votes
1answer
1k views

Jailkit not allowing SSH connections

I'm trying to set up jailkit on one of my servers which is running Debian 5. I created a new ssh user (bob) and a chroot directory for him (/var/www/bob). I gave the chroot the extshellplusnet and ...
0
votes
2answers
2k views

Problem with symbolic links in FTP client

I've recently run into some problems while trying to setup a FTP server a certain way. I have a client who has a LOT of data put into one folder. The client then has various directories by which the ...
2
votes
2answers
237 views

Security of chroot and linux binaries

I'd like to verify the security of chroot and default programs in a linux distribution (say Ubuntu). Example: I set up jail directory 'A'. Every linux binary from the distribution is placed in 'A' ...
0
votes
1answer
632 views

How to get PHP mysql_ extension for linux chroot jail?

I've setup a chroot jail using jailkit on my Ubuntu 10.04 system. I've copied the binaries for php and mysql which all worked fine. So from the command line of my chrooted user I can run php ...
3
votes
1answer
708 views

jailkit chroot terminates ssh login

I've done my very best to follow these instructions to create a chroot shell. But the connection get's terminated every time I try to login via ssh for my new chrooted user. I start my ssh terminal, ...
0
votes
1answer
7k views

SSH Fails, /bin/bash: No such file or directory

I have a user who is jailed. sshd_config: Subsystem sftp internal-sftp Match user matt ChrootDirectory %h X11Forwarding no AllowTcpForwarding no passwd: matt:x:1001:5006:Matt ...
3
votes
2answers
2k views

Setup PHP/MYSQL for chrooted jail (jailkit)

I'm running Ubuntu, with PHP5-FPM, mysql & Nginx I've just setup a chrooted jail with jailkit. Now I need to work out how to setup my php and mysql to work within the jail. Google search doesn't ...