A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms

2
votes
2answers
776 views

Setting up a chroot sftp on debian server

I'm trying to allow a user "user" to access my server by either sftp or ssh. I want to jail them into a directory with chroot. I read the instructions here however it does not work. I did the ...
1
vote
2answers
556 views

PHP-FPM, chroot, Ubuntu Precise 12.04, and no access to DNS

There's a plenty of advices across the Internet on how to enable DNS in chroot. The problem is that there's no /lib/libnss* files in the Ubuntu Precise. I've tried to copy these files from /etc/: ...
0
votes
2answers
47 views

Chroot doesn't work in PHP5-FPM + nginx

I have added two line in: "/etc/php5/fpm/php-fpm.conf". There are: chroot = /home/user/www/public_html chdir = / In the server section of my: /etc/nginx/sites-available/default: root ...
0
votes
2answers
124 views

Nginx and chroot users - Permission denied

I use nginx 1.4.4 and I created a chrooted user. This user can only see his /home/user folder, and I created in a "www" folder. I put in my virtual host file : root /home/user/www; But I have an ...
0
votes
2answers
306 views

chroot SFTP to another users subdirectory

I've successfully set up SFTP to chroot a user to their home directory. However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me ...
0
votes
2answers
317 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
3
votes
1answer
1k views

Increasing permissiveness/permissions for umask + openssh + chrooted SFTP server using internal-sftp

The suggestion found at these links works for me: How to setup ssh's umask for all type of connections http://ubuntuforums.org/showthread.php?t=1107974#5 Summary: Use PAM to inject the umask, ...
1
vote
1answer
405 views

Add write permissions for chroot user on centOS 6

I've a jailed user "ftest" (in /home/ftest) but he can't create files or folders within the jail. User was added by: useradd -g nginx -G sftpjail -s /bin/false Permissions and owners are: 755 ...
1
vote
1answer
396 views

SSH - SFTP/SCP only + additional command running in background

there are many solutions described to get ur SSH-connection forced to only run SFTP by modifying the sshd_config by adding a new group match and give that new group a Forcecommand internal-sftp Well ...
1
vote
1answer
164 views

Chroot / sFtp / Ftps Problems

regular debian admin, i am faced to a complex situation and i appreciate your advices... I have a server with chroot environment that is working without problems up to now : Chroot user : store ...
1
vote
1answer
197 views

installing debian with debootstrap and lxc instead of debootstrap and chroot

So I need to 'install' (or rather prepare a root filesystem for) a Debian system and that was done with debootstrap and chroot before. However due to the not-very-existent isolation of chroots (with ...
1
vote
1answer
628 views

Is it possible to run dhcpd3 as non-root user in a chroot jail?

I would like to run dhcpd3 from a chroot jail on Debian Lenny. At the moment, I can run it as root from my jail. Now I want to do this as non-root user (as "-u blah -t /path/to/jail" Bind option). ...
0
votes
1answer
36 views

Chrooting Shell Environment on debian wheezy

I created a chrooted user on a directory /home/jail, Inside my /home/jail are the bin,dev,etc,home,lib,lib64 and usr directories. /home/jail/ {bin,dev,etc,home,lib,lib64,usr} are all owned by ...
0
votes
1answer
23 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...
0
votes
1answer
16 views

Chrooted user logged out immediately after login

I am trying to use chroot to setup a user who can login via ssh and limit access to the /var/www directory. The server is on AWS running Amazon Linux 64-bit, openssh installed. I used ssh-keygen to ...
0
votes
1answer
107 views

chroot with sftp on centos 6.5

I'm trying to get sftp working with proper chroot configuration on Centos 6.5 server. As for now I get: sftp user@000.000.000.000 User@000.000.000.000's password: Write failed: Broken pipe Couldn't ...
0
votes
1answer
75 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
1answer
387 views

Only allow user SSH access to one directory

I have a server running Centos 6.4 and I need to allow a freelancer access to one folder on the server to upload some code and do some testing - I have set their home directory in /etc/passwd to: ...
0
votes
1answer
71 views

How do I properly chroot Nginx and uwsgi?

I have a pretty good idea of how to do this, I just wanted to make sure I wasn't going to be seriously screwing stuff up before I deployed it. I have a web application which uses uwsgi and nginx, and ...
0
votes
1answer
232 views

Mininet additional veth pair between host and server

For those who don’t know - Mininet is a tool that allows for the automated creation of multiple OVS switches, chroot linux ‘containers’ as hosts and links them all together to prototype OVS powered ...
0
votes
1answer
79 views

Cannot get static file with chroot wordpress

I was trying to configure chroot with php-fpm and mysql. I managed to work it out, however when I try to reach files other than index.php (like css, png etc.) it keeps giving 404. However when I ...
0
votes
1answer
157 views

Do any Unix/Linux FTP daemons allow users to be “jailed” without using chroot?

When setting up an FTP account for a specific purpose - e.g. as a drop-point for sharing data files - it seems sensible to give the user access only to the particular directory, and no view of a wider ...
0
votes
1answer
89 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
175 views

PXE server - ubuntu setting username/password later - is it possible?

so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu. So what I am looking for is a way (possibly hackerish-way) ...
0
votes
1answer
2k views

vsftpd: refusing to run with writable root inside chroot

I want to setup a anonymous only ftp server (able to upload files). Here is my config file: listen=YES anonymous_enable=YES anon_root=/var/www/ftp local_enable=YES write_enable=YESr. ...
0
votes
1answer
331 views

Chrooted nginx, fastcgi, and cgit

I'm running a Debian server with nginx chrooted in /var/chroot/nginx. It works wonderfully, but I'd like to be able to run cgit and host my gitolite repositories. When it was out of the chroot it ...
0
votes
1answer
167 views

how to make sure that Apache processes is chrooted?

I am using Apache 2 on Debian 6. I tried to make Apache by using following resource: http://www.debian.org/doc/manuals/securing-debian-howto/ap-chroot-apache-env.en.html how can i be sure that Apache ...
0
votes
1answer
621 views

Cron, chroot, jails, and permissions

I'm trying to grasp how to run crons under chrooted users. I'm on Ubuntu, and using ISPConfig where I can. I created a cronjob in ISPConfig which resulted in a file /etc/cron.d/ispc_chrooted_web1 ...
0
votes
1answer
172 views

How To Create Users Who Are Chrooted At A Directory

Is it possible to have users on linux, who's home directory is still the default /home/joe but when they login via ssh/sftp, they are chroot at /apps/web/? Basically I wanted to keep all users files ...
0
votes
1answer
129 views

Jail CentOS group to single dir (and dir's within) - FTP

What I am ultimately looking to do is jail a group of users to only be able to FTP into their home folder. They should be able to have r&w capabilities within their home folder, and within ALL ...
0
votes
1answer
1k views

What is the easiest and cleanest way to create a chrooted SFTP on Centos 5.4?

I would like to setup a SFTP with chroot (or equivalent) login to my Centos 5.4 server in a clean way. By clean way I mean by using only the YUM command if possible and with something easy to maintain ...
3
votes
0answers
531 views

Can socat be used to forward an ssh-agent socket into a chroot?

I'm building custom Debian environments on a remote server, which I connect to over SSH. This involves building a debootstrap environment, then chrooting into it to run a custom installer. As part of ...
1
vote
0answers
95 views

Page displays “File not found” when I enable php-fpm chroot on debian wheezy apache2.2

I set up a chroot jail for a user "bob". bob is located in /var/jails/bob Bob has a site which is located in /var/jails/bob/bobssite.com/public_html Everything seems to work so far, including the ...
1
vote
0answers
86 views

ChrootDirectory for SFTP user in virtual host directory with write permissions and SuPHP

I am trying to give a SFTP user (user2) writeable access to a virtual host directory (website) in /var/www/mywebsite under Ubuntu 12.04. I have setup sshd_config to use Chrooting so that this user ...
1
vote
0answers
74 views

How can I get openSSL to run on my web server with a PHP5-FPM chroot?

On my web server, I changed the chroot to only have access to the root of my website's home directory as opposed to the rest of the file system, for security purposes. However, I've noticed that since ...
1
vote
0answers
326 views

Pure-FTPD: chroot doesn't chroot

On a Debian Wheezy machine, I've installed Pure-FTPD. As I wanted the users to be chrooted into their home directories, I took a look at the virtualchroot functionality. After a bit of configuration, ...
1
vote
0answers
116 views

Built in chroot jail RHEL 5 returns No such file or directory

I need to create a chroot jail on my RHEL5 production server to allow a specific user to work with the less right possible, but with GIT. Here is my system configuration : RHEL 5 : Release 5.10 ...
1
vote
0answers
201 views

Mounting /var/www for File recovery

I'm in the process of recovering my server's files in a "Rescue" mode. Its a Ubuntu 12.04 with 2x3TB in RAID1. The instructions were to SSH into the server in "Rescue" mode, mount the partitions, ...
1
vote
0answers
48 views

Chrooted from LiveCD: Bad IO performace

my Ubuntu Server installation is broken, so I grabbed a Ubuntu Desktop CD, mounted my Ubuntu installtion on my hard disk and chrooted into it. But now my IO performance is really bad: # time dd ...
1
vote
0answers
790 views

PureFTPd : ChrootEveryone not working

I have a fresh install of Ubuntu 12.04 with pure-ftpd version 1.0.35-1. I don't use database for the only user I have (ftpuser1 - localuser), but I want to lock him into his home directory. ...
0
votes
0answers
38 views

How to lock a user into a directory (not SSH)

I have regular users who are not SSH'd into a machine but are accessing the machine directly. How can I lock them into their home directory or any directory? At the moment they can successfully run rm ...
0
votes
0answers
29 views

Why is update-grub unable to find my root device?

I created a new root partition and I am trying run update-grub inside a chroot. I bindmount the following for i in /dev /dev/pts /proc /sys /run; do sudo mount -B $i /mnt$i; done update-grub ...
0
votes
0answers
89 views

ProFTPD - User can't create directory when in a chroot jail

I've got a CentOS release 6.5 with Webmin and configured ProFTPd 1.34. I've put my users in a chroot jail. When they logon they are chrooted to their own home directory. But there is a problem when ...
0
votes
0answers
34 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
0
votes
0answers
73 views

SSH chroot solution for Mutt

We have an environment tailored for our users to log in via ssh and instead of gaining access directly to a shell, users have a script in place of a shell. The script simply launches Mutt on the ...
0
votes
0answers
42 views

pureftpd virtual user access

I need to create multiple virtual users to have access to a home directory of a user, even though i have set up the chroot according to documentation. Restarting ftp server: Running: ...
0
votes
0answers
96 views

PHP-FPM is not working as expected

I am using Debian Squeeze and set up PHP-FPM with fastcgi. I have several virtual hosts defined on the same host. I defined chroot for each pool configuration but somehow it is possible to change ...
0
votes
0answers
130 views

openvpn up script execute command in schroot

We would like to control a service in a chroot environment utilising scripts run during an openvpn up and down sequence. Host OS is ubuntu-12-04, chroot environment runs ubuntu-12-10 A session has ...
0
votes
0answers
62 views

sftponly with symlink

I did the sftponly trick with sshd. Is there an option to make it following symlinks with to other directories that do not belong to the user? Match Group sftponly ChrootDirectory /var/sftp/ ...