A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms (1)

16
votes
2answers
34k views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory /var/www/...
2
votes
3answers
5k views

ubuntu bind9 AppArmor read permission denied (chroot jail)

I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system I am getting the following errors in my syslog: Jul 27 16:53:...
0
votes
0answers
27 views

Setting up a secure SFTP drop folder for serving web pages

I've set up a chrooted sftp folder following the instructions here: http://www.thegeekstuff.com/2012/03/chroot-sftp-setup/ It works fine, my only problem is it appears there is a glaring ...
2
votes
1answer
153 views

sftp server chroot initial directory

I have configured an sftp server with chroot and it works fine, the only thing that is bothering me is the initial landing directory, since the sftp user does not have write permissions in the landing ...
0
votes
1answer
182 views

What is the best method of installing programs into a chroot / jail?

On a Debian based system... I have created a minimal chroot/jail using a script similar to the one at https://github.com/pmenhart/make_chroot_jail/blob/master/make_chroot_jail.sh with the goal of ...
2
votes
2answers
1k views

Setup secure shared hosting (Apache, PHP, MySQL)

So I'm setting up a shared hosting with Apache, PHP, MySQL and the biggest question mark is how to do with PHP, since there is a million options out there how to configure it securely. The plan is: ...
0
votes
1answer
34 views

Restrict SFTP folder with PHP permisions

I want an user to have access to /var/www/domain.com/public_html so I followed this tutorials, but with my modifications so I can have my users upload directly to their domains: https://www.linode....
9
votes
5answers
8k views

Ubuntu - can non-root user run process in chroot jail?

Is it possible for a non-root user to run a chroot process on Ubuntu?
2
votes
1answer
3k views

A proper way to create a chrooted SSH on CentOS 7 [closed]

There are a lot of tutorials of how to create a chrooted SFTP, but I would like to use SSH, because it is much faster to simply wget, unzip, mysql and mysqldump than tossing around the FTP and ...
0
votes
1answer
51 views

vsftpd chroot configuration

I'm having problems setting up correctly VSFTPD with chroot on a Ubuntu 14.04 (LTS) server. No matter what I try, I keep being allowed to freely navigate the server. Here is my /etc/vsftpd.conf file (...
0
votes
1answer
444 views

SSH - ChrootDirectory not working

I am trying to chroot a "test" user (group sftp) to /home/test. I've added the following lines at the end of my sshd_config: Subsystem sftp internal-sftp Match User test ChrootDirectory /home/...
2
votes
1answer
482 views

Set Initial Remote Working Directory in SFTP

I am running Amazon Linux AMI (Red Hat derivative), and am creating a new SFTP server using OpenSSH. I would like for the SFTP user to be restricted to a directory, and to be able to write to the ...
-1
votes
2answers
703 views

Chroot user to an existing folder witch parent owner isn´t root [closed]

We have moodle installed on our company and due to big SCORM packages + slow conection + proxy, I usually upload them with SFTP with my root user. Now, I want to give users a way to upload files by ...
0
votes
0answers
260 views

SFTP chroot jail not working

Trying to follow this tutorial but for Arch Linux. /etc/ssh/sshd_config: # override default of no subsystems #Subsystem sftp /usr/lib/ssh/sftp-server Subsystem sftp internal-sftp ...
0
votes
1answer
143 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
4
votes
2answers
1k views

update grub2 without hardware access (e.g. in a chroot)?

I'm writing a script that takes a master KVM image, converts it to VDI, makes a few changes to it, and offers it up for download. I need to update the kernel boot parameters for some of the newly ...
0
votes
1answer
2k views

Only allow user SSH access to one directory

I have a server running Centos 6.4 and I need to allow a freelancer access to one folder on the server to upload some code and do some testing - I have set their home directory in /etc/passwd to: ...
1
vote
0answers
733 views

CentOS 6.5 ssh ChrootDirectory not working

I have been trying to configure my CentOS 6.5 minimal 64 bit machine to allow SFTP users to connect and get jailed to specific folders. I can sftp in using the unix commmand: "sftp user@localhost" and ...
1
vote
1answer
810 views

Chroot on Ubuntu 14.04.2 using Jailkit - /dev/pts No such file or directory

For the past few days I've been trying to setup a chroot on my Ubuntu server but I've been running into an issue. I've tried several different methods of setting up a chroot on Ubuntu including just ...
0
votes
1answer
1k views

Extend Jailkit with command [closed]

I am running ISPConfig 3 using Jailkit on my server and need to add mercurial to all existing and new jailkit account. From what I understand, it will only be applied for new users.. how can I add ...
0
votes
2answers
457 views

Trying to ChrootDirectory an SFTP user to their home directory

I have followed a few examples of how to do this, all of them end up with modifying sshd_config to Subsystem sftp internal-sftp Match User chubbyninja ChrootDirectory %h AllowTCPForwarding ...
0
votes
2answers
411 views

Enable non root user to upload/download onto website directory

I have a website in my VPS. I install Debian 7 on that VPS. My http document is located in directory /var/www/example.com I installed Nginx on that server and directory /var/www/example.com is owned ...
7
votes
4answers
3k views

Difference between chroot and jail

I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the "jail"....
2
votes
4answers
5k views

Webserver: chrooted PHP gives mysql.sock error when attempting to reach mysql

Hey guys, I've configured an Ubuntu webserver with Nginx + PHP5-FPM. I've created a chrooted environment (using jailkit) that I'm tossing my developers into, from where they can develop their test ...
-1
votes
1answer
97 views

I can't create chroot user with full permissions

I am trying to create chroot user but i want to give him a permissions to create and delete files and directories. I have Ubuntu server installed on virtualbox and i am connecting to it from my host ...
0
votes
1answer
332 views

Files uploaded using FileZilla with SFTP are missing permissions

I am using chroot in sftp. And it works perfectly, but files uploaded with FileZilla are stored without any permissions (basically 000). ---------- 1 cwsftp sftp 4364328 Jan 19 16:02 hygq8KAZ3seC.128....
0
votes
0answers
132 views

PHP FPM, chroot can't connect to AWS RDS

I've been experimenting with chroot'ing php-fpm pools via the built-in chroot method in php's pool config. This is for the purpose of hosting multiple wordpress websites on the same AWS EC2 instance. ...
6
votes
3answers
7k views

Trying to setup chroot'd rsync

I'm trying to set up a backup server. I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync. I quickly discovered that I was not the only one trying to do ...
0
votes
2answers
150 views

Support needed creating Dovecot listener on Debian ( postfix)

I would like to create a dovecot lmtp listener under /var/spool/postfix/private/. Because postfix runs chrooted by default under debian. How can I do this? Grtz
0
votes
1answer
228 views

Chef installation in a chroot (packer): not starting services

I'm trying to use packer.io to create a machine image for a server who's deployment I already have automated using Chef (chef-solo specifically), using the amazon-chroot builder and the chef-solo ...
0
votes
4answers
9k views

Custom initrd init script: how to create /dev/initctl

I have a virtual machine (VMM is Xen 3.3) equipped with two IDE HDD's (/dev/hda and /dev/hdb). The root file system is in /dev/hda1, where Scientific Linux 5.4 is installed. /dev/hdb contains an empty ...
0
votes
1answer
150 views

sftp login issue with chroot

I want to be able to create a structure for hosting multiple sites. I want the user files to reside inside /var/www/sites/domain.com and the sftp access to be restricted with chroot. I've followed ...
0
votes
1answer
273 views

Configuring Chroot for SFTP Users

I am trying to configure a SFTP server for some automated backups. I configured an Ubuntu 14.04 server and have had partial success. The idea I'm looking to do is this: A user will be created for ...
2
votes
1answer
460 views

How to 'apt-get upgrade' a debootstraped chroot jail from outside?

I have a daemon running in a chroot jail that I have generated with debootstrap. I'd like to remove apt and dpkg from the jail, but I want to keep the other packages updated. Can I upgrade the ...
0
votes
1answer
375 views

Chrooting Shell Environment on debian wheezy

I created a chrooted user on a directory /home/jail, Inside my /home/jail are the bin,dev,etc,home,lib,lib64 and usr directories. /home/jail/ {bin,dev,etc,home,lib,lib64,usr} are all owned by root:...
0
votes
1answer
73 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...
1
vote
2answers
2k views

“No input file specified” when running php under fastcgi inside chroot under nginx outside of chroot

I have a scenario with nginx/1.4.6 running on Ubuntu 14.04 but with php/5.2.10 inside a chroot Ubuntu 9.10 (Karmic Koala). My issue is that all requests to php files result in the dreaded "No input ...
0
votes
2answers
80 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
0
votes
1answer
219 views

Chrooted user logged out immediately after login

I am trying to use chroot to setup a user who can login via ssh and limit access to the /var/www directory. The server is on AWS running Amazon Linux 64-bit, openssh installed. I used ssh-keygen to ...
1
vote
1answer
1k views

How to run “apt-get” in chroot from systemrescuecd?

I boot with systemrescuecd 4.3.1, and run like below. $ mkdir /tmp/os $ mount /dev/sda1 /tmp/os $ mount -o bind /sys /tmp/os/sys $ mount -o bind /dev /tmp/os/dev $ mount -o bind /proc /tmp/os/proc $ /...
2
votes
5answers
2k views

How secure is SSH ForceCommand on a jump host?

I have the following setup in my network: Internet <--> Bastion <--> Local Network I have several users and each user is assigned to a specific machine. Or in other words: Each user ...
0
votes
1answer
418 views

chroot with sftp on centos 6.5

I'm trying to get sftp working with proper chroot configuration on Centos 6.5 server. As for now I get: sftp user@000.000.000.000 User@000.000.000.000's password: Write failed: Broken pipe Couldn't ...
0
votes
1answer
436 views

Chrooted user can't login with SSH

I created a new user with no shell access like this: useradd -g www -d /www/user01 -p ****** -s /sbin/nologin user01 Then in my sshd_config I add those lines: AllowUsers user01 user02 manager ...
1
vote
0answers
402 views

Page displays “File not found” when I enable php-fpm chroot on debian wheezy apache2.2

I set up a chroot jail for a user "bob". bob is located in /var/jails/bob Bob has a site which is located in /var/jails/bob/bobssite.com/public_html Everything seems to work so far, including the ...
1
vote
2answers
224 views

VSFTPD seems to ignore the configuration settings

I have been batling with vsftpd for days now. I started with trying to setup seceure vsftpd on my current Centos 5.6 server but could not lock users down to their home directories. I spent days ...
0
votes
2answers
182 views

server side cd on sftp client connect

Is there a way with sftp to have it configured server-side to run a cd command when a client connects? I have my users thrown in to chroot, the folder has to be root:root chowned and cannot be ...
0
votes
1answer
313 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
0answers
407 views

ProFTPD - User can't create directory when in a chroot jail

I've got a CentOS release 6.5 with Webmin and configured ProFTPd 1.34. I've put my users in a chroot jail. When they logon they are chrooted to their own home directory. But there is a problem when ...
2
votes
2answers
2k views

nginx+php-fpm(chroot). No input file specifed

OS: Centos PHP: 5.5.6 Nginx: 1.4.4 Nginx conf server { listen 80; server_name example.ltd; root /srv/example.ltd/www; index index.php; access_log /srv/example.ltd/logs/nginx-main.log main; ...
0
votes
1answer
289 views

How to keep jailed users from changing directory to parent dirs?

I've chroot users with chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and I'm the only user in the chroot_list file. Other users log in jailed but when they ...