A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms

0
votes
2answers
117 views

SFTP Chroot Ubuntu 10.10

I'm trying to give an SFTP only access to his home directory to a user. This is the /etc/passwd line for the user: bob:x:1003:1003::/home/bob:/bin/false I edited the /etc/ssh/sshd_config file like ...
0
votes
1answer
87 views

Cannot get static file with chroot wordpress

I was trying to configure chroot with php-fpm and mysql. I managed to work it out, however when I try to reach files other than index.php (like css, png etc.) it keeps giving 404. However when I ...
1
vote
1answer
199 views

Chroot with SSH connections doesn't work

I have found How can I chroot ssh connections? and a lot of different blog articles and similar (http://undeadly.org/cgi?action=article&sid=20080220110039, ...
0
votes
2answers
125 views

Nginx and chroot users - Permission denied

I use nginx 1.4.4 and I created a chrooted user. This user can only see his /home/user folder, and I created in a "www" folder. I put in my virtual host file : root /home/user/www; But I have an ...
3
votes
1answer
482 views

update grub2 without hardware access (e.g. in a chroot)?

I'm writing a script that takes a master KVM image, converts it to VDI, makes a few changes to it, and offers it up for download. I need to update the kernel boot parameters for some of the newly ...
1
vote
2answers
329 views

Secure PHP environments with PHP-FPM and SFTP

I'd like to set up secure environments for a small number of untrusted PHP websites on a Debian server. Right now everything runs on the same Apache2 with mod_php5 and vsftpd for administrative file ...
0
votes
1answer
270 views

Run chroot's /etc/init.d on system startup?

So I have this dedicated server that is running Debian. I have an intense business need (client's requirement) that I also install Gentoo as a Chroot. I have successfully done so, but now, I am ...
0
votes
2answers
283 views

chroot: can't resolve domain names [closed]

i can't resolve domain names in chrooted environment - in the normal shell it works fine. i'm using plesk 11.5 and my chroot environment contains the following: ...
3
votes
1answer
3k views

SFTP: log to a separate file for chrooted user

I would like to log SFTP commands to a separate file however it works only for root but not for chrooted user: # cat /etc/ssh/sshd_config ... Subsystem sftp internal-sftp -l INFO Match Group ...
1
vote
0answers
332 views

Pure-FTPD: chroot doesn't chroot

On a Debian Wheezy machine, I've installed Pure-FTPD. As I wanted the users to be chrooted into their home directories, I took a look at the virtualchroot functionality. After a bit of configuration, ...
2
votes
2answers
2k views

Virtualmin Chroot FTP Users

Can someone tell me how to chroot FTP users with Virtualmin, if it is possible.
1
vote
1answer
289 views

FTP users can't see any files when chrooted

On a Debian Wheezy 64bit, I create a new user for a customer to place files into a directory. After the user is created, I take away his interactive login by replacing /bin/bash with /bin/false in ...
1
vote
1answer
294 views

Chroot issue, broken pipe

I need to give access to a developer to our server vía ssh. I hosted his web on /home/miuser and some other web applications in /home/... I have this config in my Subsystem sftp internal-sftp Match ...
1
vote
0answers
116 views

Built in chroot jail RHEL 5 returns No such file or directory

I need to create a chroot jail on my RHEL5 production server to allow a specific user to work with the less right possible, but with GIT. Here is my system configuration : RHEL 5 : Release 5.10 ...
0
votes
2answers
198 views

force group assignment in chrooted sftp environment

I've got the following setting: There are several users /home/user1, /home/user2, and so on. Additionally there is a user /home/sftp-all. The folder /home/sftp-all/shared is mounted in every other ...
2
votes
1answer
959 views

Setup secure shared hosting (Apache, PHP, MySQL)

So I'm setting up a shared hosting with Apache, PHP, MySQL and the biggest question mark is how to do with PHP, since there is a million options out there how to configure it securely. The plan is: ...
2
votes
1answer
3k views

ubuntu bind9 AppArmor read permission denied (chroot jail)

I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system I am getting the following errors in my syslog: Jul 27 ...
0
votes
1answer
108 views

How to create chroot jail with ability to change some system settings

How to properly create chroot jail (on Ubuntu, or some some other Linux if not applicable) to make user able to edit system settings (eg. with ifconfig) and be able to communicate with external ...
0
votes
1answer
254 views

Set Users as chrooted for sftp, but allow user to login in SSH

I have setup a ssh server on debian 7, to use sftp connection. I chrooted some user, with this config: Match Group sftpusers ChrootDirectory /sftp/%u ForceCommand internal-sftp But if i ...
0
votes
3answers
273 views

FTP server configuration

Hi I am configuring VsFTPd 2.2.2 server on Debian 5.0. I want user after login can see and edit just two dirs: /home/user/ /var/www/project1/ /var/www/project2/ Possible solutions I can Chroot ...
3
votes
1answer
1k views

Why use lxc instead of chroot?

One ubuntu server hosts 3 apps all on separate domains. Each app has its own developers. App developers belong to linux "sftp" group. chroot allows password sftp access for each app developer. ...
2
votes
3answers
3k views

Webserver: chrooted PHP gives mysql.sock error when attempting to reach mysql

Hey guys, I've configured an Ubuntu webserver with Nginx + PHP5-FPM. I've created a chrooted environment (using jailkit) that I'm tossing my developers into, from where they can develop their test ...
0
votes
1answer
158 views

Do any Unix/Linux FTP daemons allow users to be “jailed” without using chroot?

When setting up an FTP account for a specific purpose - e.g. as a drop-point for sharing data files - it seems sensible to give the user access only to the particular directory, and no view of a wider ...
0
votes
1answer
1k views

CentOS 6 restrict user ssh access to his home folder

I am trying to restrict a newly added user to his homedir /home/username. Don't want him to be able to cd out of it. I have this my sshd_config: Match User username ChrootDirectory %h ...
0
votes
1answer
89 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
137 views

Is it worth to use chroot when running web applications?

My setup: In production I'm using one virtual server per one web application shard. Shards are behind load balancer. In backstage we run web application + DB on a single virtual server. The ...
0
votes
1answer
455 views

Apache 2.2.4: problems chroot with modsecurity

I've been installed mod_security. If i simply include in the httpd the configuration files of mod_security, it starts normally. Indeed, if i try to add SecChrootDir /mnt/chr , httpd will start, but at ...
0
votes
0answers
97 views

PHP-FPM is not working as expected

I am using Debian Squeeze and set up PHP-FPM with fastcgi. I have several virtual hosts defined on the same host. I defined chroot for each pool configuration but somehow it is possible to change ...
1
vote
1answer
367 views

reseting password not working in KVM guest

I lost the root password for a guest system. I mounted the guest system and changed it to single user mode. Then I used virsh console to access the guest system, which was now in single user mode, ...
2
votes
2answers
707 views

Defining hard links in puppet

Is there a way to define hardlinks inside puppet manifest? It seems file type can only define symbolic links, but I need it to be hard links in order to make some of my chrooted applications to work. ...
2
votes
2answers
628 views

How to setup a public rsync and sftp server

I want to setup a public storage server which allows sftp and rsync (through ssh). I've got it working with a chroot jail and rssh. When the user connects to the server with sftp he can read all the ...
-5
votes
1answer
47 views

Process still running from a deleted chroot? [closed]

so I come to you with a somewhat interesting problem. I had a chroot running that had an entire lamp server installed and running on it. I tried to purge and remove the lamp server but messed up ...
1
vote
2answers
952 views

Implications that come with chrooting php-fpm

I am creating a production server that will run nginx with php-fpm. I want to have a good mix between securing the server, and still having good quick workflow. Now one thing that always secures the ...
1
vote
3answers
1k views

sftp chrooted dosent work with some sftp client (Cyberduck)

I'm not able working on SFTP+chrooted env Using internal-sftp directive it works, but i'm not able to set umask. (ex umask 002) Using sftp-server from openssh package dosent't work because login shell ...
-1
votes
2answers
72 views

SSH stopped working for no reason

Please help. Everything was working fine. How can I connect to the command line now? Configuration Amazon EC2 server Ubuntu & Apache2 Only one user (root - not real name) has SSH access, ...
6
votes
4answers
1k views

Difference between chroot and jail

I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the ...
0
votes
1answer
382 views

How to use abstract names of unix domain sockets with fastcgi in nginx?

I tried some perl examples of unix domain sockets using abstract names: Created a socket starting with a null character: my $socket_path = "\0wibble"; using netstat -nlp I can see the socket: unix ...
0
votes
1answer
177 views

PXE server - ubuntu setting username/password later - is it possible?

so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu. So what I am looking for is a way (possibly hackerish-way) ...
0
votes
1answer
61 views

updatedb within chroot

I'm running a Debian wheezy under chroot and I notice that updatedb doesn't work ! I think it's because of missing entries inside fstab. Am I wrong ? Any advice to fix this ?
1
vote
0answers
203 views

Mounting /var/www for File recovery

I'm in the process of recovering my server's files in a "Rescue" mode. Its a Ubuntu 12.04 with 2x3TB in RAID1. The instructions were to SSH into the server in "Rescue" mode, mount the partitions, ...
0
votes
2answers
307 views

chroot SFTP to another users subdirectory

I've successfully set up SFTP to chroot a user to their home directory. However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me ...
0
votes
1answer
317 views

Is debootstrap chroot safe?

I followed this tutorial http://wiki.debian.org/chroot on Debian Squeeze AMD64, to get a separated environment. This chroot is really safe? In others chroot tutorials, create a chroot for an ...
0
votes
0answers
130 views

openvpn up script execute command in schroot

We would like to control a service in a chroot environment utilising scripts run during an openvpn up and down sequence. Host OS is ubuntu-12-04, chroot environment runs ubuntu-12-10 A session has ...
3
votes
1answer
551 views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
0
votes
1answer
463 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
4
votes
3answers
5k views

Trying to setup chroot'd rsync

I'm trying to set up a backup server. I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync. I quickly discovered that I was not the only one trying to do ...
0
votes
2answers
497 views

CURL in PHP chroot'ed environment

How can I find out what files or sockets are needed by Curl when running in a chroot'ed PHP environment on Mac OSX? I recently secured my website by chrooting PHP but now every call to Amazon S3 ...
2
votes
2answers
826 views

Is Chrooting apache/mysql/php a standard practice of securing web servers containing sensitive data?

Is Chrooting apache/mysql/php a standard practice of securing web servers containing sensitive data (is it necessary)?
0
votes
1answer
480 views

Postfix chroot jail doesn't work

Trying to setup Postfix to run chrooted. Only bit of info on this comes from the man page which simply says to follow the instructions in master.cf. master.cf is self explanatory, just set 'y' in the ...
0
votes
2answers
318 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...