A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms (1)

1
vote
0answers
10 views

run commands in schroot environment from chroot host (outside chroot)?

I have a program to run in a schroot environment. I can run like this without an error: user@precise:~$ schroot -c trusty (trusty)user@precise:~$ myprogram.sh my.Rmd However, when I call the ...
2
votes
3answers
3k views

vsftpd: refusing to run with writable root inside chroot

I want to setup a anonymous only ftp server (able to upload files). Here is my config file: listen=YES anonymous_enable=YES anon_root=/var/www/ftp local_enable=YES write_enable=YESr. ...
1
vote
1answer
36 views

How to create chroot'ed SFTP access on an Archlinux Server?

I've followed this instructions on the ArchWiki and GeekStuff to setup an user which can only access the server via SFTP (SSH) but without Shell (/bin/false) in a chrooted environment of his home dir. ...
2
votes
3answers
1k views

Setting up a chroot sftp on debian server

I'm trying to allow a user "user" to access my server by either sftp or ssh. I want to jail them into a directory with chroot. I read the instructions here however it does not work. I did the ...
0
votes
2answers
1k views

Chroot doesn't work in PHP5-FPM + nginx

I have added two line in: "/etc/php5/fpm/php-fpm.conf". There are: chroot = /home/user/www/public_html chdir = / In the server section of my: /etc/nginx/sites-available/default: root ...
-1
votes
4answers
6k views

Chroot jail not working with VSFTPD

I have been trying for ages to get this to work, to no avail. I have a VSFTPD server running on Arch. It works fine EXCEPT that users can navigate up the directory tree and view/download files in ...
1
vote
1answer
451 views

Chroot issue, broken pipe

I need to give access to a developer to our server vía ssh. I hosted his web on /home/miuser and some other web applications in /home/... I have this config in my Subsystem sftp internal-sftp Match ...
1
vote
2answers
1k views

vsftpd chroot_local_user does nothing

I'm setting up a vsftpd server on: Linux 2.6.32-26-server #48-Ubuntu SMP Wed Nov 24 10:28:32 UTC 2010 x86_64 GNU/Linux When I set chroot_local_user=YES, there is no effect (I can still see / when I ...
2
votes
1answer
31 views

Error using dnssec-signzone in chroot'd bind 9.8 when a zone file includes other files

Using bind 9.8.2 on RHEL 6.5, running chroot'd. I have a zone file that includes other files (it's a zone with a large number of servers in different datacenters, and there's one included file per ...
1
vote
2answers
6k views

Pure-FTPD chroot not working on a fresh Debian install?

I am trying to get chroot to work with virtual Pure-FTPD users, but for some reason it simply is not working. I changed the following options: /etc/default/pure-ftpd-common: VIRTUALCHROOT=true ...
1
vote
1answer
46 views

How to prevent sftp users from viewing some directories (inside their chroot directory)

The sftp users of my server are chrooted together in a specific directory. They all belong to the group sftponly. The rights are ok, including a special right to prevent users from overwriting ...
1
vote
2answers
334 views

vsftpd and home directories of chrooted local users

NOTE: Users are chrooted and their local_root is set to /srv/ftp. Why vsftpd forces local chrooted users to have home directory? It will refuse to work if there is not any. And I've found the ...
0
votes
1answer
55 views

How to Isolate users process from core process i.e from kernel processes completely? [closed]

Chroot is not good option as stated at many places due to root process can easily exit the chroot Is there any way to isolate the user space completely in *nix based systems?
0
votes
1answer
111 views

Chrooting Apache 2.4 on Debian Jessie with mod_security

I have been advised to chroot my apache2 installation to better secure the sensitive content on the rest of the server. I have installed and setup mod_security properly and can see in the logs that it ...
3
votes
1answer
2k views

VSFTPD how chroot not chrooted users in /home?

I need to chroot all local users to their home directories, but one user should have access to all user directories. If I put admin_user in chroot_list_file he has access for whole file system. I want ...
1
vote
1answer
74 views

Changing password of a sftp chrootDirectory stops it from logging in

So I have a chrootdir setup in sshd_config to a folder, and the user myuser, it's been working fine for months, then today I wanted to change myuser's password, so I did this with passwd, then ...
4
votes
1answer
8k views

VSFTPD - Change User Home Directory

I need to update a ftp user's home directory. Could I run the userdel command then re-add the user without losing the directory the user was attached to? Or is there another way to change the user's ...
0
votes
2answers
49 views

SSH failing for jailed account

I tried to setup a chroot jail for a user account I specifically setup for ssh. I set it up and it seemed to work fine yesterday but today it is not working. It doesn't seem to be an SSH issue since ...
1
vote
1answer
19 views

How to identify that BIND is running under chroot

I am trying to run BIND under chroot on Ubuntu and CentOS. Installing it on CentOS is pretty straight forward with just installing the packages - bind and bind-chroot, while Ubuntu is a little more ...
0
votes
1answer
1k views

Unable to setup git with jailed user

I have performed below steps to setup jailed user here username is test3 mkdir -p /home/test3/{dev,etc,lib,usr,bin} mkdir -p /home/test3/usr/bin chown root.test3 /home/test3 mknod -m 666 ...
2
votes
2answers
1k views

Is it advisable to run Apache in a chroot jail?

I have been advised by a sysadmin guy I know, to run Apache in a chroot jail, for increased security. I have the following questions: Is this advisable (i.e. are there any 'gotcha's that I need to ...
0
votes
1answer
5k views

vsftp error: 500 OOPS: child died

I installed vsftp, and then setup the config file as following: anonymous_enable=NO local_enable=YES write_enable=YES local_umask=022 chroot_local_user=NO chroot_list_enable=YES ...
2
votes
1answer
35 views

Create a Web User

I am running Apache 2.4.8 on Arch Linux, but that doesn't matter really. I would like to create a user who is devoted to web management. I have created a user, a group, and added the user to the ...
3
votes
1answer
9k views

500 OOPS: vsftpd: refusing to run with writable root inside chroot() Login failed on debian

I install vsftpd for running FTP server on debian 7.3. I checked vsftpd version was 2.3.5 and i configure it like so: listen=YES local_enable=YES write_enable=YES chroot_local_user=YES ...
0
votes
3answers
2k views

Problem with symbolic links in FTP client

I've recently run into some problems while trying to setup a FTP server a certain way. I have a client who has a LOT of data put into one folder. The client then has various directories by which the ...
0
votes
1answer
374 views

How to create virtual users in vsftpd?

I am running vsftpd on my Debian squeeze server. I configured it to chroot local users into their /home/ directory. Now, the problem is that users' web pages are outside of their /home/ directories ...
3
votes
3answers
5k views

Proftpd: How to set default root to a users home directory without jailing the user?

I've installed proftpd on my debian box but I'm having having some trouble with the configuration. In my proftpd.conf I've added; DefaultRoot ~ !ftp_special This works fine in that all users ...
1
vote
1answer
107 views

SFTP chroot to /var/www stopped working

04 and setup sftp chroot to /var/www for our 2 developers. I followed the guide available online (referenced a few other as well) http://www.krizna.com/ubuntu/setup-ftp-server-on-ubuntu-14-04-vsftpd/ ...
0
votes
1answer
64 views

SecChrootDir Jailing apache 2.2.X on Centos 6.7

I was trying to do apache jailing on centos 6.7 with modsec. I already built everything even the jail directory and remodeled the config files. httpd(apache) says it started nicely, however its dead. ...
3
votes
1answer
177 views

Should Postfix run chrooted if it already is in it a FreeBSD jail?

I'm running Postfix together with Dovecot and a few milters in a FreeBSD jail. Is there a significant security gain when I run SMTP and SMTPD daemons chrooted as well?
12
votes
4answers
11k views

Is there a windows equivalent to chroot?

On a *nix system I can use a chroot to isolate two processes from each other and from the rest of the system. Is there any similar security system under windows? Or is there any way to prevent two ...
2
votes
3answers
1k views

Defining hard links in puppet

Is there a way to define hardlinks inside puppet manifest? It seems file type can only define symbolic links, but I need it to be hard links in order to make some of my chrooted applications to work. ...
1
vote
0answers
266 views

Why is update-grub unable to find my root device?

I created a new root partition and I am trying run update-grub inside a chroot. I bindmount the following for i in /dev /dev/pts /proc /sys /run; do sudo mount -B $i /mnt$i; done And then: ...
3
votes
1answer
101 views

vsftp: why is allow_writeable_chroot=YES a bad idea?

There are several thousand blog posts about vsftp and allow_writeable_chroot=YES The common error message: Fixing 500 OOPS: vsftpd: refusing to run with writable root inside chroot () I solved ...
-1
votes
1answer
24 views

Chroot Jailing groups via sshd_config for FTP results in connection aborted for all members in that group

I am attempting to chroot jail using the /etc/ssh/sshd_config file. My FTP server is vsfptd, and while I know how to chroot jail using vsftpd's config, I want to try it using sshd_config. However, ...
1
vote
1answer
61 views

What are the correct Linux permissions inside chroot jail with userspec

I am trying to setup a chroot jail, then I did: which binary ldd /bin/binary Then I did: cp /lib64/{libs} $jail/lib64 cp /usr/lib64/{libs} $jail/usr/lib64 PS: During this setup, I discovered ...
0
votes
2answers
211 views

permission denied on authorized_keys

I am attempting to set up SFTP for chrooted users, and use SSH public key authentication. In this example I'll be working with the dummy user "globocorp" who's a member of "sftpusers". This user is ...
0
votes
0answers
31 views

Run Crontab command in jailed enviroment

I had created a user account in my server. And I created a jailed enviroments for that user. One thing i need is how to run crontab command in jailed enviroments. I tried add bash crontab to ...
0
votes
1answer
73 views

To chroot or not to chroot (using alternatives)

For a VPS with some small websites, some users need SFTP-access. I want jail them in their own /home/-directory. This directory contains the data for the website. This is all new for me, so i need ...
1
vote
1answer
1k views

Jailkit not locking down SFTP, working for SSH

I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root: mkdir /var/jail jk_init -j /var/jail ...
0
votes
1answer
271 views

How to add user with SFTP access to '/var/www/html/adir' folder on Amazon EC2?

This question is very much related to this question. The answer there is useful, but unfortunately incomplete. How to add user with SFTP/ FTP access to '/var/www/html/website_abc' folder on ...
0
votes
1answer
91 views

internal-sftp -u 002 is ignored for copied files

I configured OpenSSH like this Subsystem sftp internal-sftp Match Group sftp ForceCommand internal-sftp -u 002 AuthorizedKeysFile /home/sftp/ssh/%u ChrootDirectory %h ...
1
vote
1answer
617 views

VSFTPD allows root access despite being listed in ftpusers file

I've installed VSFTPD on a LEMP stack on Ubuntu 14.04. The only significant changes made to vsftpd.conf are: anonymous_enable=no local_enable=yes write_enable=yes chroot_local_user=yes ...
0
votes
1answer
90 views

named-sdb (bind) can't resolve mysql hostname in chroot

When running bind in chroot, the mysql dlz driver cannot resolve the hostname of the mysql server (rds). Using amazon ami (centos based) in VPC. Aug 25 10:22:27 paper named-sdb[6812]: Loading 'Mysql ...
0
votes
1answer
324 views

schroot only works as root

I recently changed my OS from openSUSE to CentOS. A part of that transition was migrating my chroot jails and schroot configuration. That transition does however not seem to be "plug and play". I used ...
0
votes
1answer
173 views

How to lock a user into a directory (not SSH)

I have regular users who are not SSH'd into a machine but are accessing the machine directly. How can I lock them into their home directory or any directory? At the moment they can successfully run rm ...
0
votes
1answer
184 views

VSFTPD Cant perform anon uploads. 500 OOPS

I can't get my vsftpd config to allow anon root uploads. $ vsftpd -v $ vsftpd: version 3.0.2 $ cat /etc/vsftpd.conf # Example config file /etc/vsftpd.conf # # The default compiled in settings are ...
12
votes
2answers
30k views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory ...
2
votes
3answers
5k views

ubuntu bind9 AppArmor read permission denied (chroot jail)

I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system I am getting the following errors in my syslog: Jul 27 ...
0
votes
0answers
25 views

Setting up a secure SFTP drop folder for serving web pages

I've set up a chrooted sftp folder following the instructions here: http://www.thegeekstuff.com/2012/03/chroot-sftp-setup/ It works fine, my only problem is it appears there is a glaring ...