A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.
-1
votes
0answers
13 views
How to set up Tiered Chroot jails?
So here's what is going on. I have a system I want to set up SFTP jails on. Simple enough, I got it done easily. The issue I am running into now is that I want to be able to have a user SFTP jailed to ...
0
votes
0answers
15 views
schroot auto-mounting doesnt works?
I've been reading about schroot and trying to understand the parts in various tutorials that mention about auto mounting. For example check the section (and the parts after it) "Basic schroot ...
-2
votes
0answers
23 views
FTP Chroot Broken or what [closed]
In regards to https://www.facebook.com/SolidShellSec/posts/580682168629285 they say PureFTP has broken CHroot system and symlinks can be followed? What is this bug? Is is patchable or should I switch ...
0
votes
0answers
9 views
Setup cherokee as a shared hosting platform
I would like to use cherokee webserver to host multiple websites NOT on one account, simular to cPanel(I don't need or want all cPanel has to offer and as far as I know still can't use Cherokee) . In ...
2
votes
2answers
294 views
Defining hard links in puppet
Is there a way to define hardlinks inside puppet manifest?
It seems file type can only define symbolic links, but I need it to be hard links in order to make some of my chrooted applications to work. ...
2
votes
2answers
143 views
How to setup a public rsync and sftp server
I want to setup a public storage server which allows sftp and rsync (through ssh). I've got it working with a chroot jail and rssh. When the user connects to the server with sftp he can read all the ...
-5
votes
1answer
33 views
Process still running from a deleted chroot? [closed]
so I come to you with a somewhat interesting problem.
I had a chroot running that had an entire lamp server installed and running on it. I tried to purge and remove the lamp server but messed up ...
0
votes
1answer
81 views
Apache + PHP-FPM + chroot results “File not found.” error
I want to set chroot to the DocumentRoot using PHP-FPM pools' chroot attribute. With the settings below, whatever I do I get only a "File not found." error:
/etc/php5/fpm/pool.d/example.conf
...
1
vote
2answers
419 views
Implications that come with chrooting php-fpm
I am creating a production server that will run nginx with php-fpm. I want to have a good mix between securing the server, and still having good quick workflow.
Now one thing that always secures the ...
1
vote
1answer
1k views
ubuntu bind9 AppArmor read permission denied (chroot jail)
I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system
I am getting the following errors in my syslog:
Jul 27 ...
1
vote
3answers
957 views
sftp chrooted dosent work with some sftp client (Cyberduck)
I'm not able working on SFTP+chrooted env
Using internal-sftp directive it works, but i'm not able to set umask. (ex umask 002)
Using sftp-server from openssh package dosent't work because login shell ...
-1
votes
2answers
52 views
SSH stopped working for no reason
Please help. Everything was working fine. How can I connect to the command line now?
Configuration
Amazon EC2 server
Ubuntu & Apache2
Only one user (root - not real name) has SSH access, ...
5
votes
4answers
194 views
Difference between chroot and jail
I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the ...
0
votes
1answer
63 views
How to use abstract names of unix domain sockets with fastcgi in nginx?
I tried some perl examples of unix domain sockets using abstract names:
Created a socket starting with a null character:
my $socket_path = "\0wibble";
using netstat -nlp I can see the socket:
unix ...
0
votes
1answer
24 views
PXE server - ubuntu setting username/password later - is it possible?
so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu.
So what I am looking for is a way (possibly hackerish-way) ...
0
votes
1answer
34 views
updatedb within chroot
I'm running a Debian wheezy under chroot and I notice that updatedb doesn't work !
I think it's because of missing entries inside fstab. Am I wrong ?
Any advice to fix this ?
1
vote
0answers
41 views
Mounting /var/www for File recovery
I'm in the process of recovering my server's files in a "Rescue" mode. Its a Ubuntu 12.04 with 2x3TB in RAID1. The instructions were to SSH into the server in "Rescue" mode, mount the partitions, ...
0
votes
2answers
59 views
chroot SFTP to another users subdirectory
I've successfully set up SFTP to chroot a user to their home directory.
However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me ...
0
votes
1answer
80 views
Is debootstrap chroot safe?
I followed this tutorial http://wiki.debian.org/chroot on Debian Squeeze AMD64, to get a separated environment.
This chroot is really safe? In others chroot tutorials, create a chroot for an ...
0
votes
0answers
29 views
openvpn up script execute command in schroot
We would like to control a service in a chroot environment utilising scripts run during an openvpn up and down sequence.
Host OS is ubuntu-12-04, chroot environment runs ubuntu-12-10
A session has ...
1
vote
1answer
57 views
SFTP user can't edit or create files
Server: Ubuntu 12.04 LTS
I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/.
bob ...
0
votes
1answer
81 views
Cannot log in via chroot SSH
I not only want to transmit files via sftp, but also want to log in via ssh.
Here is what I changed in sshd_config
Match Group ssh_jail
ChrootDirectory /mnt/chroot
I have mounted ...
3
votes
3answers
2k views
Trying to setup chroot'd rsync
I'm trying to set up a backup server.
I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync.
I quickly discovered that I was not the only one trying to do ...
0
votes
0answers
99 views
Chroot Apache on a Debian Squeeze server
I am trying to setup Apache 2.2.16 in a chroot with Debian Squeeze and have followed the (simple) howto here to put Apache into a chroot:
...
0
votes
2answers
111 views
CURL in PHP chroot'ed environment
How can I find out what files or sockets are needed by Curl when running in a chroot'ed PHP environment on Mac OSX?
I recently secured my website by chrooting PHP but now every call to Amazon S3 ...
2
votes
2answers
714 views
Is Chrooting apache/mysql/php a standard practice of securing web servers containing sensitive data?
Is Chrooting apache/mysql/php a standard practice of securing web servers containing sensitive data (is it necessary)?
0
votes
1answer
125 views
Postfix chroot jail doesn't work
Trying to setup Postfix to run chrooted. Only bit of info on this comes from the man page which simply says to follow the instructions in master.cf.
master.cf is self explanatory, just set 'y' in the ...
0
votes
2answers
83 views
Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04
UPDATE:
I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
1
vote
1answer
136 views
Add write permissions for chroot user on centOS 6
I've a jailed user "ftest" (in /home/ftest) but he can't create files or folders within the jail.
User was added by:
useradd -g nginx -G sftpjail -s /bin/false
Permissions and owners are:
755 ...
1
vote
1answer
171 views
Trying to set up SFTP only in a chroot jail for one user
Hopefully you guys can help and see if I've done something weird here, I'm trying to log in with a user I set up, FileZilla shows me:
Command: open "///@///" Command: Pass: ********
Status: ...
0
votes
0answers
27 views
setup a global variable in user chroot environment
When my users login to my server, they are chrooted to a folder through this config in /etc/ssh/sshd_config:
Match Group chroot
ChrootDirectory /usr/lib/sshchroot/chroot/
I want when each user ...
0
votes
2answers
130 views
OpenBSD Apache configuration: NFS mount
I have a NFS mount at /mnt/web/ on OpenBSD 5.2.
How can I mount this so it's accessible to the web?
Currently I'm soft linking it to /var/www/web
ln -s /mnt/web /var/www/web
I've added an alias ...
5
votes
4answers
215 views
Is there a chroot build script somewhere?
I am about to develop a little script to gather information for a chroot-jail.
In my case this looks (at the first glance) pretty simple:
The application has a clean rpm-install and did install ...
0
votes
0answers
143 views
VSFTPD : chroot to subdirectory of directory owned by other FTP user?
I've got a webserver which hosts a website. The website is located in /home/website. This folder is owned by root (subfolders owned by website), as I currently have set up vsftpd to chroot the user ...
0
votes
1answer
155 views
Chrooted nginx, fastcgi, and cgit
I'm running a Debian server with nginx chrooted in /var/chroot/nginx. It works wonderfully, but I'd like to be able to run cgit and host my gitolite repositories.
When it was out of the chroot it ...
0
votes
0answers
39 views
sftponly with symlink
I did the sftponly trick with sshd.
Is there an option to make it following symlinks with to other directories that do not belong to the user?
Match Group sftponly
ChrootDirectory /var/sftp/
...
9
votes
3answers
387 views
RedHat: is it possible to install packages in a kind of mock environment to build RPMs
Is there a tool that allows to install the dependecies of an RPM .spec into an isolated environment? I won't install such dependencies globally on the system and I am not able to do so since I have ...
-2
votes
2answers
35 views
Why do I have several CHROOT processes? [closed]
Would someone be able to tell me why I have several entries of the following on my server:
named 3196 1 2 Dec18 ? 00:55:43 /usr/sbin/named -u named -t /var/named/chroot
I do not ...
2
votes
2answers
215 views
Why chroot is considered insecure?
I've been playing around with CentOS box for couple of years now. So I'm pretty comfy with terminal. However, I read a lot of blog-post claiming that chroot is insecure and amount of those posts ...
0
votes
1answer
131 views
gcc sandboxing tool - AppArmor / CHROOT jail on Ubuntu 12.04
We have a Node application as the front end to a C++ sandboxing tool, which compiles code using gcc and outputs the result to the browser.
e.g.
exec("gcc -o /tmp/test /tmp/test.cpp",
function ...
1
vote
0answers
35 views
Chrooted from LiveCD: Bad IO performace
my Ubuntu Server installation is broken, so I grabbed a Ubuntu Desktop CD, mounted my Ubuntu installtion on my hard disk and chrooted into it.
But now my IO performance is really bad:
# time dd ...
0
votes
1answer
196 views
vsftpd chroot_local_user error
When I set chroot_local_user to YES in the vsftpd configuration, I get this error in my ftp client:
220: (vsFTPd 2.3.5)
Connected to 23.21.50.255.
Cmd: AUTH TLS
234: Proceed with negotiation.
Cmd: ...
0
votes
1answer
411 views
SFTP, Chroot problems on Redhat
I'm having problems setting up sftp with a ChrootDirectory. I've done an equivalent setup on other distros, but for some reason I cannot get it to work on a Redhat AMI.
The changes to my sshd_config ...
0
votes
0answers
221 views
Trying to run chrooted suPHP with UserDir, getting 500 server error
I've managed to get suPHP working fine with UserDir (i.e. PHP files run from the /home/$username/public_html) directory, but I can't get it to work when I chroot it to the user's home directory.
I've ...
0
votes
1answer
73 views
How to allow access to binaries outside a root'ed directory
At Heroku I can use binaries like ImageMagick and others, but the filesystem seems chroot'ed and a clone of the web application directory (git repository).
How do I allow access to binaries outside ...
0
votes
0answers
148 views
linux Apache 2.4 ChrootDir vs mod_chroot ChrootDir
I'm trying to use ChrootDir directive in httpd.conf with the mod_chroot set of instructions .
However, it looks like since these instructions were first written apache has implemented their own ...
1
vote
1answer
227 views
SSH - SFTP/SCP only + additional command running in background
there are many solutions described to get ur SSH-connection forced to only run SFTP by modifying the sshd_config by adding a new group match and give that new group a Forcecommand internal-sftp
Well ...
1
vote
1answer
186 views
Jailkit not locking down SFTP, working for SSH
I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root:
mkdir /var/jail
jk_init -j /var/jail ...
0
votes
1answer
469 views
SFTP: file symlinks in a jailed (chrooted) directory
I'm trying to set up sftp so that a few trusted people can access/edit/create some files. I have jailed a user into their home directory (/home/name) but have run into a problem. I want for them to ...
0
votes
1answer
375 views
Chrooted user does not start in his home directory and does not load his bash_profiles
If the users logs in, he starts in / of the chroot (Which is /var/jail on the real machine). I would like him to start in his home-dir. Also, he seems not to load any of his profile-files (.bash.rc ...
