The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
26 views

How to keep jailed users from changing directory to parent dirs?

I've chroot users with chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and I'm the only user in the chroot_list file. Other users log in jailed but when they ...
2
votes
2answers
705 views

Setting up a chroot sftp on debian server

I'm trying to allow a user "user" to access my server by either sftp or ssh. I want to jail them into a directory with chroot. I read the instructions here however it does not work. I did the ...
2
votes
1answer
44 views

Home/end keys are not working correctly in the bash CLI for a jailed user using PuTTY

I'm using PuTTY to access my U14.04 LTS server via SSH. When I log in using my main account, the number pad keys work fine in the BASH CLI. When I log in to a user who's been jailed using Jailkit, ...
1
vote
1answer
3k views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory ...
0
votes
0answers
69 views

Ubuntu jail SSH & SFTP

So I'm having trouble with jailkit. SSH is working fantastically, SFTP not so much. zoneminder:x:1001:1002:,,,:/home/jail/./home/zoneminder:/usr/sbin/jk_chrootsh scott@neptune:/home/jail/home$ ls -l ...
0
votes
1answer
183 views

Mininet additional veth pair between host and server

For those who don’t know - Mininet is a tool that allows for the automated creation of multiple OVS switches, chroot linux ‘containers’ as hosts and links them all together to prototype OVS powered ...
1
vote
1answer
2k views

500 OOPS: vsftpd: refusing to run with writable root inside chroot() Login failed on debian

I install vsftpd for running FTP server on debian 7.3. I checked vsftpd version was 2.3.5 and i configure it like so: listen=YES local_enable=YES write_enable=YES chroot_local_user=YES ...
0
votes
0answers
23 views

Jailkit Process Reading Restriction

I have created a chroot jail using jailkit, all works fine so far except that the jailed user can see all running process's with the ps -A command. I want the ps command available to the jailed user ...
0
votes
0answers
205 views

Chroot master process Nginx 1.2.1

I want to install nginx not current stable version but in one currently deposits, and chroot the process. I followed some tutorials including: Securing Debian Manual Appendix H - Chroot environment ...
0
votes
2answers
213 views

chroot: can't resolve domain names [closed]

i can't resolve domain names in chrooted environment - in the normal shell it works fine. i'm using plesk 11.5 and my chroot environment contains the following: ...
1
vote
1answer
64 views

SSH : Restrict sftp to a directory without jailing shell

For a user group I'd like to: Restrict SFTP access to a given directory Use a custom shell for TTY which takes care of only exposing what needs to be exposed from the system but that still need ...
1
vote
0answers
103 views

Built in chroot jail RHEL 5 returns No such file or directory

I need to create a chroot jail on my RHEL5 production server to allow a specific user to work with the less right possible, but with GIT. Here is my system configuration : RHEL 5 : Release 5.10 ...
1
vote
1answer
120 views

lock ftp user in home directory

I have read, researched, tested, and still cannot seem to get this working correctly. I am running VSFTPD on Debian. With a test account configured to point the user's home directory to a mount point ...
2
votes
1answer
3k views

ubuntu bind9 AppArmor read permission denied (chroot jail)

I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system I am getting the following errors in my syslog: Jul 27 ...
0
votes
1answer
89 views

How to create chroot jail with ability to change some system settings

How to properly create chroot jail (on Ubuntu, or some some other Linux if not applicable) to make user able to edit system settings (eg. with ifconfig) and be able to communicate with external ...
0
votes
1answer
93 views

How to prevent non-chroot user access to system files

My FTP Server has 5 Users namely user01,user02,user03,user04,user05. Shared Folder /home/ftpusers Inside the folder... /home/ftpusers/user01 /home/ftpusers/user02 ...
0
votes
2answers
74 views

Need help having a particular setup for vsftp with virtual users with access to a particular folder

as part of some services we are offering to some companies, we have gradually became the hosting providers for them using amazon services. so we host 2 web sites on amazon. the root documents for the ...
1
vote
1answer
613 views

jailing sftp users without messy folders [duplicate]

Running ispconfig3 on CentOS6. I'm setting up a new server that will host multiple websites for different clients and I want to use sftp as a more secure option to ftp. I have successfully set up an ...
0
votes
2answers
578 views

WinSCP and chroot problem, “A call to an OS Function Failed”

We've got a chroot environment on CentOS set up for our users to download data from. One of our users is using WinSCP and they're getting this error: "A call to an OS function failed". This link on ...
1
vote
2answers
116 views

Easiest way to keep users in their home directory on a web server

I was wondering what would be the easiest and most secured way on a web server to prevent users from browsing directories other than their home folder. I have a mutualised web server with several ...
0
votes
1answer
752 views

cygwin sftp chroot cannot view contents of bound mountpoint

I'm trying to give user2 access only to his home directory and full permissions on /cygdrive/e. I created a Data/ directory within his $home, added a bind directive in /etc/fstab (see below), and ...
1
vote
0answers
125 views

SFTP OpenSSH 5.3 chroot-jail with write access to home directory

I've followed the myriad of tutorials/instructions to setup a CHROOT'ed/Jailed SFTP account, and it works great. However, I need the user accounts to be able to have full write access to their home ...
0
votes
1answer
417 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
-1
votes
3answers
3k views

Chroot jail not working with VSFTPD

I have been trying for ages to get this to work, to no avail. I have a VSFTPD server running on Arch. It works fine EXCEPT that users can navigate up the directory tree and view/download files in ...
0
votes
2answers
285 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
3
votes
2answers
1k views

Setup PHP/MYSQL for chrooted jail (jailkit)

I'm running Ubuntu, with PHP5-FPM, mysql & Nginx I've just setup a chrooted jail with jailkit. Now I need to work out how to setup my php and mysql to work within the jail. Google search doesn't ...
0
votes
1answer
368 views

Unable to setup git with jailed user

I have performed below steps to setup jailed user here username is test3 mkdir -p /home/test3/{dev,etc,lib,usr,bin} mkdir -p /home/test3/usr/bin chown root.test3 /home/test3 mknod -m 666 ...
0
votes
4answers
127 views

Vserver: secure mails from a hacked webservice

I plan to rent and setup a vServer with Debian xor CentOS. I know from my host, that the vServers are virtualized with linux-vserver. Assume there is a lighthttpd and some mail transfer agent running ...
1
vote
1answer
481 views

Jailkit not locking down SFTP, working for SSH

I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root: mkdir /var/jail jk_init -j /var/jail ...
0
votes
2answers
86 views

Crossplatform “jail” for an application

We currently have a variety of systems (Linux, Solarix, *BSD, HP-UX ...) on which we are not allowed to install anything into / (but I have root access. That's strange, I know). But we'd like to run ...
1
vote
0answers
740 views

PureFTPd : ChrootEveryone not working

I have a fresh install of Ubuntu 12.04 with pure-ftpd version 1.0.35-1. I don't use database for the only user I have (ftpuser1 - localuser), but I want to lock him into his home directory. ...
0
votes
1answer
554 views

adding ChrootDirectory to sshd_config to jail a user prevents the user to login

i've created an user on ubuntu 10.04 and wanted to jail the user by disabling ssh shell and allow sftp. when there is no ChrootDirectory in the sshd_config the user can login just that it can see ...
1
vote
2answers
991 views

vsftpd chroot_local_user does nothing

I'm setting up a vsftpd server on: Linux 2.6.32-26-server #48-Ubuntu SMP Wed Nov 24 10:28:32 UTC 2010 x86_64 GNU/Linux When I set chroot_local_user=YES, there is no effect (I can still see / when I ...
1
vote
2answers
309 views

vsftpd and home directories of chrooted local users

NOTE: Users are chrooted and their local_root is set to /srv/ftp. Why vsftpd forces local chrooted users to have home directory? It will refuse to work if there is not any. And I've found the ...
0
votes
1answer
157 views

how to make sure that Apache processes is chrooted?

I am using Apache 2 on Debian 6. I tried to make Apache by using following resource: http://www.debian.org/doc/manuals/securing-debian-howto/ap-chroot-apache-env.en.html how can i be sure that Apache ...
0
votes
2answers
1k views

Problem with symbolic links in FTP client

I've recently run into some problems while trying to setup a FTP server a certain way. I have a client who has a LOT of data put into one folder. The client then has various directories by which the ...
0
votes
1answer
674 views

Extend Jailkit with command

I am running ISPConfig 3 using Jailkit on my server and need to add mercurial to all existing and new jailkit account. From what I understand, it will only be applied for new users.. how can I add ...
2
votes
1answer
689 views

How to run easy_install and pip without root, without virtualenv?

People have access to servers as normal users (jailed actually), and they're advised - at the moment - to download whatever python packages they need, setup.py build them, then add their location to ...
3
votes
2answers
111 views

How to create a link outside of the jail, but accessable within the jail?

I have created a chroot jail, but now I want to be able to create a link within the jail which links outside of the jail. Is this possible?
0
votes
1answer
612 views

setlocale error with chroot

I have created a chroot jail and when I log in I get a bash warning bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8) I tried to google the error, but wasn't able to find a ...
1
vote
1answer
128 views

How can I set a global sftp chroot for a group (or all) users on a server [duplicate]

Possible Duplicate: set up a chrooted SFTP login with OpenSSH I am not familiar with chroot jails so please forgive my ignorance. From my understanding you would normally chroot a user to ...
2
votes
1answer
1k views

Jailkit not allowing SSH connections

I'm trying to set up jailkit on one of my servers which is running Debian 5. I created a new ssh user (bob) and a chroot directory for him (/var/www/bob). I gave the chroot the extshellplusnet and ...
6
votes
5answers
5k views

Ubuntu - can non-root user run process in chroot jail?

Is it possible for a non-root user to run a chroot process on Ubuntu?
2
votes
2answers
219 views

Security of chroot and linux binaries

I'd like to verify the security of chroot and default programs in a linux distribution (say Ubuntu). Example: I set up jail directory 'A'. Every linux binary from the distribution is placed in 'A' ...
0
votes
1answer
481 views

How to get PHP mysql_ extension for linux chroot jail?

I've setup a chroot jail using jailkit on my Ubuntu 10.04 system. I've copied the binaries for php and mysql which all worked fine. So from the command line of my chrooted user I can run php ...
2
votes
1answer
622 views

jailkit chroot terminates ssh login

I've done my very best to follow these instructions to create a chroot shell. But the connection get's terminated every time I try to login via ssh for my new chrooted user. I start my ssh terminal, ...
0
votes
1answer
5k views

SSH Fails, /bin/bash: No such file or directory

I have a user who is jailed. sshd_config: Subsystem sftp internal-sftp Match user matt ChrootDirectory %h X11Forwarding no AllowTcpForwarding no passwd: matt:x:1001:5006:Matt ...
2
votes
1answer
372 views

Updating (and configuring) chroots on general purpose CentOS webserver with yum?

I'm currently providing web hosting on a shared web hosting VPS environment - that has no chroot. This is obviously a big security concern, although I've made sure that only the owners of files can ...
1
vote
1answer
92 views

Linux: Is it safe to have 100+ mounts to folders?

I am setting up a chrooted environment for users who request SFTP access, essentially their login directory must be /home/xxxx which is not accessible by public FTP, Would mounting each /home/xxx ...
0
votes
1answer
746 views

How do I properly jail a user in Debian, giving them access to select applications?

After failing to use makejail, I followed a howto for setting up a jail using a script (this one is for Debian etch, but I'm using lenny -- seems to work ok though). However, it gives the user a very ...