A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms

1
vote
1answer
6 views

Chroot on Ubuntu 14.04.2 using Jailkit - /dev/pts No such file or directory

For the past few days I've been trying to setup a chroot on my Ubuntu server but I've been running into an issue. I've tried several different methods of setting up a chroot on Ubuntu including just ...
2
votes
2answers
865 views

Setting up a chroot sftp on debian server

I'm trying to allow a user "user" to access my server by either sftp or ssh. I want to jail them into a directory with chroot. I read the instructions here however it does not work. I did the ...
0
votes
2answers
46 views

Enable non root user to upload/download onto website directory

I have a website in my VPS. I install Debian 7 on that VPS. My http document is located in directory /var/www/example.com I installed Nginx on that server and directory /var/www/example.com is owned ...
0
votes
1answer
2k views

vsftpd: refusing to run with writable root inside chroot

I want to setup a anonymous only ftp server (able to upload files). Here is my config file: listen=YES anonymous_enable=YES anon_root=/var/www/ftp local_enable=YES write_enable=YESr. ...
6
votes
4answers
1k views

Difference between chroot and jail

I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the ...
2
votes
4answers
3k views

Webserver: chrooted PHP gives mysql.sock error when attempting to reach mysql

Hey guys, I've configured an Ubuntu webserver with Nginx + PHP5-FPM. I've created a chrooted environment (using jailkit) that I'm tossing my developers into, from where they can develop their test ...
-1
votes
1answer
27 views

I can't create chroot user with full permissions

I am trying to create chroot user but i want to give him a permissions to create and delete files and directories. I have Ubuntu server installed on virtualbox and i am connecting to it from my host ...
0
votes
1answer
89 views

Files uploaded using FileZilla with SFTP are missing permissions

I am using chroot in sftp. And it works perfectly, but files uploaded with FileZilla are stored without any permissions (basically 000). ---------- 1 cwsftp sftp 4364328 Jan 19 16:02 ...
4
votes
2answers
10k views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory ...
0
votes
0answers
57 views

PHP FPM, chroot can't connect to AWS RDS

I've been experimenting with chroot'ing php-fpm pools via the built-in chroot method in php's pool config. This is for the purpose of hosting multiple wordpress websites on the same AWS EC2 instance. ...
5
votes
3answers
5k views

Trying to setup chroot'd rsync

I'm trying to set up a backup server. I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync. I quickly discovered that I was not the only one trying to do ...
0
votes
2answers
123 views

Support needed creating Dovecot listener on Debian ( postfix)

I would like to create a dovecot lmtp listener under /var/spool/postfix/private/. Because postfix runs chrooted by default under debian. How can I do this? Grtz
0
votes
1answer
86 views

Chef installation in a chroot (packer): not starting services

I'm trying to use packer.io to create a machine image for a server who's deployment I already have automated using Chef (chef-solo specifically), using the amazon-chroot builder and the chef-solo ...
0
votes
4answers
8k views

Custom initrd init script: how to create /dev/initctl

I have a virtual machine (VMM is Xen 3.3) equipped with two IDE HDD's (/dev/hda and /dev/hdb). The root file system is in /dev/hda1, where Scientific Linux 5.4 is installed. /dev/hdb contains an empty ...
0
votes
1answer
51 views

sftp login issue with chroot

I want to be able to create a structure for hosting multiple sites. I want the user files to reside inside /var/www/sites/domain.com and the sftp access to be restricted with chroot. I've followed ...
0
votes
1answer
56 views

Configuring Chroot for SFTP Users

I am trying to configure a SFTP server for some automated backups. I configured an Ubuntu 14.04 server and have had partial success. The idea I'm looking to do is this: A user will be created for ...
2
votes
1answer
63 views

How to 'apt-get upgrade' a debootstraped chroot jail from outside?

I have a daemon running in a chroot jail that I have generated with debootstrap. I'd like to remove apt and dpkg from the jail, but I want to keep the other packages updated. Can I upgrade the ...
0
votes
0answers
72 views

How to lock a user into a directory (not SSH)

I have regular users who are not SSH'd into a machine but are accessing the machine directly. How can I lock them into their home directory or any directory? At the moment they can successfully run rm ...
2
votes
2answers
977 views

Is it advisable to run Apache in a chroot jail?

I have been advised by a sysadmin guy I know, to run Apache in a chroot jail, for increased security. I have the following questions: Is this advisable (i.e. are there any 'gotcha's that I need to ...
0
votes
1answer
134 views

Chrooting Shell Environment on debian wheezy

I created a chrooted user on a directory /home/jail, Inside my /home/jail are the bin,dev,etc,home,lib,lib64 and usr directories. /home/jail/ {bin,dev,etc,home,lib,lib64,usr} are all owned by ...
0
votes
0answers
55 views

Why is update-grub unable to find my root device?

I created a new root partition and I am trying run update-grub inside a chroot. I bindmount the following for i in /dev /dev/pts /proc /sys /run; do sudo mount -B $i /mnt$i; done update-grub ...
7
votes
4answers
5k views

Ubuntu - can non-root user run process in chroot jail?

Is it possible for a non-root user to run a chroot process on Ubuntu?
0
votes
2answers
300 views

Chroot doesn't work in PHP5-FPM + nginx

I have added two line in: "/etc/php5/fpm/php-fpm.conf". There are: chroot = /home/user/www/public_html chdir = / In the server section of my: /etc/nginx/sites-available/default: root ...
0
votes
1answer
43 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...
1
vote
2answers
323 views

“No input file specified” when running php under fastcgi inside chroot under nginx outside of chroot

I have a scenario with nginx/1.4.6 running on Ubuntu 14.04 but with php/5.2.10 inside a chroot Ubuntu 9.10 (Karmic Koala). My issue is that all requests to php files result in the dreaded "No input ...
0
votes
2answers
69 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
0
votes
1answer
49 views

Chrooted user logged out immediately after login

I am trying to use chroot to setup a user who can login via ssh and limit access to the /var/www directory. The server is on AWS running Amazon Linux 64-bit, openssh installed. I used ssh-keygen to ...
1
vote
1answer
237 views

How to run “apt-get” in chroot from systemrescuecd?

I boot with systemrescuecd 4.3.1, and run like below. $ mkdir /tmp/os $ mount /dev/sda1 /tmp/os $ mount -o bind /sys /tmp/os/sys $ mount -o bind /dev /tmp/os/dev $ mount -o bind /proc /tmp/os/proc $ ...
0
votes
1answer
206 views

chroot with sftp on centos 6.5

I'm trying to get sftp working with proper chroot configuration on Centos 6.5 server. As for now I get: sftp user@000.000.000.000 User@000.000.000.000's password: Write failed: Broken pipe Couldn't ...
0
votes
1answer
101 views

Chrooted user can't login with SSH

I created a new user with no shell access like this: useradd -g www -d /www/user01 -p ****** -s /sbin/nologin user01 Then in my sshd_config I add those lines: AllowUsers user01 user02 manager ...
11
votes
3answers
8k views

Is there a windows equivalent to chroot?

On a *nix system I can use a chroot to isolate 2 processes from each other and from the rest of the system. Is there any similar security system under windows? Or is there any way to prevent 2 ...
1
vote
0answers
184 views

Page displays “File not found” when I enable php-fpm chroot on debian wheezy apache2.2

I set up a chroot jail for a user "bob". bob is located in /var/jails/bob Bob has a site which is located in /var/jails/bob/bobssite.com/public_html Everything seems to work so far, including the ...
1
vote
2answers
68 views

VSFTPD seems to ignore the configuration settings

I have been batling with vsftpd for days now. I started with trying to setup seceure vsftpd on my current Centos 5.6 server but could not lock users down to their home directories. I spent days ...
0
votes
2answers
69 views

server side cd on sftp client connect

Is there a way with sftp to have it configured server-side to run a cd command when a client connects? I have my users thrown in to chroot, the folder has to be root:root chowned and cannot be ...
0
votes
1answer
144 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
0answers
173 views

ProFTPD - User can't create directory when in a chroot jail

I've got a CentOS release 6.5 with Webmin and configured ProFTPd 1.34. I've put my users in a chroot jail. When they logon they are chrooted to their own home directory. But there is a problem when ...
2
votes
2answers
1k views

nginx+php-fpm(chroot). No input file specifed

OS: Centos PHP: 5.5.6 Nginx: 1.4.4 Nginx conf server { listen 80; server_name example.ltd; root /srv/example.ltd/www; index index.php; access_log /srv/example.ltd/logs/nginx-main.log main; ...
0
votes
1answer
806 views

Only allow user SSH access to one directory

I have a server running Centos 6.4 and I need to allow a freelancer access to one folder on the server to upload some code and do some testing - I have set their home directory in /etc/passwd to: ...
0
votes
1answer
116 views

How do I properly chroot Nginx and uwsgi?

I have a pretty good idea of how to do this, I just wanted to make sure I wasn't going to be seriously screwing stuff up before I deployed it. I have a web application which uses uwsgi and nginx, and ...
1
vote
1answer
126 views

chroot 64 bit -> 32 bit = 'command not found'

Very obviously 32 bit cannot chroot to 64 bit but I am confident that I have successfully chrooted from 64 bit to 32 bit using Gentoo but when I [root@localhost ~]# mount /dev/vg_atom1/lv_root ...
1
vote
4answers
260 views

How to give developer shell access to use GIT and manage code, nothing else?

In CentOS 6.5 (SElinux off, chroot) with Webmin/Virtualmin (latest version) I want to give a developer access to SSH within /home/site so he can use only git to manage the code. I also want to give ...
0
votes
0answers
49 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
1
vote
1answer
213 views

suPHP : proper use of the chroot feature

I started using suPHP recently, and I'm spending an amazing amount of time debugging the configurations and different compile options to get something that actually works. I've tried contacting the ...
2
votes
1answer
574 views

VSFTPD how chroot not chrooted users in /home?

I need to chroot all local users to their home directories, but one user should have access to all user directories. If I put admin_user in chroot_list_file he has access for whole file system. I want ...
0
votes
1answer
168 views

SFTP restrict users to a few directories

I run a game server and I have a few people that I want to give access too the server to help develop. I am trying to let them have access to only these directories /var/www/Update /root/gamed/config ...
3
votes
1answer
120 views

using /bin/bash in a chroot environment - symlink or mount

A user connects via ssh. The user is also chroot-ed to their home directory. The goal is security. Since the user is chroot-ed, when they login /bin/bash is not found. Obviously the user needs ...
1
vote
1answer
292 views

chroot user to var/www/html

Can I limit a user login through sftp only can see and change files under var/www/html folder? I tried below, but then I can't login in Transmit through sftp # adduser user_www # passwd user_www # ...
1
vote
2answers
3k views

Chrooted SFTP user - Write permission denied even for owner

On CentOS release 6.5 (Final) I created a restricted user test1 useradd -s /bin/false test1 and configured ssd_config as following Subsystem sftp internal-sftp Match User test1 ...
8
votes
4answers
1k views

Why running named(bind) in chroot is so important for security? Or maybe it is not ?

I'm playing with bind and started wondering why this software is for example in CentOS running in chroot. Don't misunderstood me I know what bind is and what chroot (jail) is for. But my main wonder ...
3
votes
1answer
313 views

build user chroot on first login

I'm using ldap for remote user authentication and I basically need to either figure out how to: a. chroot a user on machine b from machine a via nfs,(which doesn't seem possible without mounting ...