A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms

1
vote
2answers
443 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
1
vote
2answers
633 views

PHP-FPM, chroot, Ubuntu Precise 12.04, and no access to DNS

There's a plenty of advices across the Internet on how to enable DNS in chroot. The problem is that there's no /lib/libnss* files in the Ubuntu Precise. I've tried to copy these files from /etc/: ...
0
votes
2answers
96 views

Enable non root user to upload/download onto website directory

I have a website in my VPS. I install Debian 7 on that VPS. My http document is located in directory /var/www/example.com I installed Nginx on that server and directory /var/www/example.com is owned ...
3
votes
1answer
1k views

Increasing permissiveness/permissions for umask + openssh + chrooted SFTP server using internal-sftp

The suggestion found at these links works for me: How to setup ssh's umask for all type of connections http://ubuntuforums.org/showthread.php?t=1107974#5 Summary: Use PAM to inject the umask, ...
1
vote
1answer
46 views

VSFTPD allows root access despite being listed in ftpusers file

I've installed VSFTPD on a LEMP stack on Ubuntu 14.04. The only significant changes made to VSFTPD.conf are: anonymous_enable=no local_enable=yes write_enable=yes chroot_local_user=yes ...
1
vote
1answer
475 views

Add write permissions for chroot user on centOS 6

I've a jailed user "ftest" (in /home/ftest) but he can't create files or folders within the jail. User was added by: useradd -g nginx -G sftpjail -s /bin/false Permissions and owners are: 755 ...
1
vote
1answer
483 views

SSH - SFTP/SCP only + additional command running in background

there are many solutions described to get ur SSH-connection forced to only run SFTP by modifying the sshd_config by adding a new group match and give that new group a Forcecommand internal-sftp Well ...
1
vote
1answer
176 views

Chroot / sFtp / Ftps Problems

regular debian admin, i am faced to a complex situation and i appreciate your advices... I have a server with chroot environment that is working without problems up to now : Chroot user : store ...
1
vote
1answer
222 views

installing debian with debootstrap and lxc instead of debootstrap and chroot

So I need to 'install' (or rather prepare a root filesystem for) a Debian system and that was done with debootstrap and chroot before. However due to the not-very-existent isolation of chroots (with ...
1
vote
1answer
743 views

Is it possible to run dhcpd3 as non-root user in a chroot jail?

I would like to run dhcpd3 from a chroot jail on Debian Lenny. At the moment, I can run it as root from my jail. Now I want to do this as non-root user (as "-u blah -t /path/to/jail" Bind option). ...
0
votes
1answer
27 views

VSFTPD Cant perform anon uploads. 500 OOPS

I can't get my vsftpd config to allow anon root uploads. $ vsftpd -v $ vsftpd: version 3.0.2 $ cat /etc/vsftpd.conf # Example config file /etc/vsftpd.conf # # The default compiled in settings are ...
0
votes
1answer
19 views

Restrict SFTP folder with PHP permisions

I want an user to have access to /var/www/domain.com/public_html so I followed this tutorials, but with my modifications so I can have my users upload directly to their domains: ...
0
votes
1answer
18 views

vsftpd chroot configuration

I'm having problems setting up correctly VSFTPD with chroot on a Ubuntu 14.04 (LTS) server. No matter what I try, I keep being allowed to freely navigate the server. Here is my /etc/vsftpd.conf file ...
0
votes
1answer
124 views

Configuring Chroot for SFTP Users

I am trying to configure a SFTP server for some automated backups. I configured an Ubuntu 14.04 server and have had partial success. The idea I'm looking to do is this: A user will be created for ...
0
votes
1answer
238 views

Chrooting Shell Environment on debian wheezy

I created a chrooted user on a directory /home/jail, Inside my /home/jail are the bin,dev,etc,home,lib,lib64 and usr directories. /home/jail/ {bin,dev,etc,home,lib,lib64,usr} are all owned by ...
0
votes
1answer
53 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...
0
votes
1answer
99 views

Chrooted user logged out immediately after login

I am trying to use chroot to setup a user who can login via ssh and limit access to the /var/www directory. The server is on AWS running Amazon Linux 64-bit, openssh installed. I used ssh-keygen to ...
0
votes
1answer
292 views

chroot with sftp on centos 6.5

I'm trying to get sftp working with proper chroot configuration on Centos 6.5 server. As for now I get: sftp user@000.000.000.000 User@000.000.000.000's password: Write failed: Broken pipe Couldn't ...
0
votes
1answer
215 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
1answer
175 views

How do I properly chroot Nginx and uwsgi?

I have a pretty good idea of how to do this, I just wanted to make sure I wasn't going to be seriously screwing stuff up before I deployed it. I have a web application which uses uwsgi and nginx, and ...
0
votes
1answer
358 views

Mininet additional veth pair between host and server

For those who don’t know - Mininet is a tool that allows for the automated creation of multiple OVS switches, chroot linux ‘containers’ as hosts and links them all together to prototype OVS powered ...
0
votes
1answer
129 views

Cannot get static file with chroot wordpress

I was trying to configure chroot with php-fpm and mysql. I managed to work it out, however when I try to reach files other than index.php (like css, png etc.) it keeps giving 404. However when I ...
0
votes
1answer
180 views

Do any Unix/Linux FTP daemons allow users to be “jailed” without using chroot?

When setting up an FTP account for a specific purpose - e.g. as a drop-point for sharing data files - it seems sensible to give the user access only to the particular directory, and no view of a wider ...
0
votes
1answer
99 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
216 views

PXE server - ubuntu setting username/password later - is it possible?

so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu. So what I am looking for is a way (possibly hackerish-way) ...
0
votes
1answer
435 views

Chrooted nginx, fastcgi, and cgit

I'm running a Debian server with nginx chrooted in /var/chroot/nginx. It works wonderfully, but I'd like to be able to run cgit and host my gitolite repositories. When it was out of the chroot it ...
0
votes
1answer
179 views

how to make sure that Apache processes is chrooted?

I am using Apache 2 on Debian 6. I tried to make Apache by using following resource: http://www.debian.org/doc/manuals/securing-debian-howto/ap-chroot-apache-env.en.html how can i be sure that Apache ...
0
votes
1answer
180 views

How To Create Users Who Are Chrooted At A Directory

Is it possible to have users on linux, who's home directory is still the default /home/joe but when they login via ssh/sftp, they are chroot at /apps/web/? Basically I wanted to keep all users files ...
0
votes
1answer
131 views

Jail CentOS group to single dir (and dir's within) - FTP

What I am ultimately looking to do is jail a group of users to only be able to FTP into their home folder. They should be able to have r&w capabilities within their home folder, and within ALL ...
0
votes
1answer
1k views

What is the easiest and cleanest way to create a chrooted SFTP on Centos 5.4?

I would like to setup a SFTP with chroot (or equivalent) login to my Centos 5.4 server in a clean way. By clean way I mean by using only the YUM command if possible and with something easy to maintain ...
-1
votes
1answer
43 views

I can't create chroot user with full permissions

I am trying to create chroot user but i want to give him a permissions to create and delete files and directories. I have Ubuntu server installed on virtualbox and i am connecting to it from my host ...
4
votes
0answers
645 views

Can socat be used to forward an ssh-agent socket into a chroot?

I'm building custom Debian environments on a remote server, which I connect to over SSH. This involves building a debootstrap environment, then chrooting into it to run a custom installer. As part of ...
1
vote
0answers
253 views

Page displays “File not found” when I enable php-fpm chroot on debian wheezy apache2.2

I set up a chroot jail for a user "bob". bob is located in /var/jails/bob Bob has a site which is located in /var/jails/bob/bobssite.com/public_html Everything seems to work so far, including the ...
1
vote
0answers
122 views

ChrootDirectory for SFTP user in virtual host directory with write permissions and SuPHP

I am trying to give a SFTP user (user2) writeable access to a virtual host directory (website) in /var/www/mywebsite under Ubuntu 12.04. I have setup sshd_config to use Chrooting so that this user ...
1
vote
0answers
129 views

How can I get openSSL to run on my web server with a PHP5-FPM chroot?

On my web server, I changed the chroot to only have access to the root of my website's home directory as opposed to the rest of the file system, for security purposes. However, I've noticed that since ...
1
vote
0answers
471 views

Pure-FTPD: chroot doesn't chroot

On a Debian Wheezy machine, I've installed Pure-FTPD. As I wanted the users to be chrooted into their home directories, I took a look at the virtualchroot functionality. After a bit of configuration, ...
1
vote
0answers
143 views

Built in chroot jail RHEL 5 returns No such file or directory

I need to create a chroot jail on my RHEL5 production server to allow a specific user to work with the less right possible, but with GIT. Here is my system configuration : RHEL 5 : Release 5.10 ...
1
vote
0answers
267 views

Mounting /var/www for File recovery

I'm in the process of recovering my server's files in a "Rescue" mode. Its a Ubuntu 12.04 with 2x3TB in RAID1. The instructions were to SSH into the server in "Rescue" mode, mount the partitions, ...
1
vote
0answers
53 views

Chrooted from LiveCD: Bad IO performace

my Ubuntu Server installation is broken, so I grabbed a Ubuntu Desktop CD, mounted my Ubuntu installtion on my hard disk and chrooted into it. But now my IO performance is really bad: # time dd ...
1
vote
0answers
880 views

PureFTPd : ChrootEveryone not working

I have a fresh install of Ubuntu 12.04 with pure-ftpd version 1.0.35-1. I don't use database for the only user I have (ftpuser1 - localuser), but I want to lock him into his home directory. ...
0
votes
0answers
14 views

Setting up a secure SFTP drop folder for serving web pages

I've set up a chrooted sftp folder following the instructions here: http://www.thegeekstuff.com/2012/03/chroot-sftp-setup/ It works fine, my only problem is it appears there is a glaring ...
0
votes
0answers
95 views

SFTP chroot jail not working

Trying to follow this tutorial but for Arch Linux. /etc/ssh/sshd_config: # override default of no subsystems #Subsystem sftp /usr/lib/ssh/sftp-server Subsystem sftp internal-sftp ...
0
votes
0answers
36 views

Sftp Log for every Jailed User

I've a sshd_config file like the following: Match user foo ChrootDirectory /mnt/foo-jail/ ForceCommand internal-sftp AllowTCPForwarding no AuthorizedKeysFile ...
0
votes
0answers
86 views

PHP FPM, chroot can't connect to AWS RDS

I've been experimenting with chroot'ing php-fpm pools via the built-in chroot method in php's pool config. This is for the purpose of hosting multiple wordpress websites on the same AWS EC2 instance. ...
0
votes
0answers
123 views

Why is update-grub unable to find my root device?

I created a new root partition and I am trying run update-grub inside a chroot. I bindmount the following for i in /dev /dev/pts /proc /sys /run; do sudo mount -B $i /mnt$i; done update-grub ...
0
votes
0answers
238 views

ProFTPD - User can't create directory when in a chroot jail

I've got a CentOS release 6.5 with Webmin and configured ProFTPd 1.34. I've put my users in a chroot jail. When they logon they are chrooted to their own home directory. But there is a problem when ...
0
votes
0answers
95 views

SSH chroot solution for Mutt

We have an environment tailored for our users to log in via ssh and instead of gaining access directly to a shell, users have a script in place of a shell. The script simply launches Mutt on the ...
0
votes
0answers
127 views

PHP-FPM is not working as expected

I am using Debian Squeeze and set up PHP-FPM with fastcgi. I have several virtual hosts defined on the same host. I defined chroot for each pool configuration but somehow it is possible to change ...
0
votes
0answers
195 views

openvpn up script execute command in schroot

We would like to control a service in a chroot environment utilising scripts run during an openvpn up and down sequence. Host OS is ubuntu-12-04, chroot environment runs ubuntu-12-10 A session has ...
0
votes
0answers
64 views

sftponly with symlink

I did the sftponly trick with sshd. Is there an option to make it following symlinks with to other directories that do not belong to the user? Match Group sftponly ChrootDirectory /var/sftp/ ...