A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms (1)

0
votes
1answer
119 views

How to chroot FreeRadius

I have set up FreeRADIUS 2.1.12 on Debian for authentication in a WPA2-Enterprise environment. Now I'd like to jail it with chroot. There is a parameter in radiusd.conf configuration file pointing to ...
4
votes
2answers
993 views

update grub2 without hardware access (e.g. in a chroot)?

I'm writing a script that takes a master KVM image, converts it to VDI, makes a few changes to it, and offers it up for download. I need to update the kernel boot parameters for some of the newly ...
0
votes
1answer
2k views

Only allow user SSH access to one directory

I have a server running Centos 6.4 and I need to allow a freelancer access to one folder on the server to upload some code and do some testing - I have set their home directory in /etc/passwd to: ...
1
vote
0answers
504 views

CentOS 6.5 ssh ChrootDirectory not working

I have been trying to configure my CentOS 6.5 minimal 64 bit machine to allow SFTP users to connect and get jailed to specific folders. I can sftp in using the unix commmand: "sftp user@localhost" and ...
0
votes
0answers
52 views

Sftp Log for every Jailed User

I've a sshd_config file like the following: Match user foo ChrootDirectory /mnt/foo-jail/ ForceCommand internal-sftp AllowTCPForwarding no AuthorizedKeysFile ...
1
vote
1answer
498 views

Chroot on Ubuntu 14.04.2 using Jailkit - /dev/pts No such file or directory

For the past few days I've been trying to setup a chroot on my Ubuntu server but I've been running into an issue. I've tried several different methods of setting up a chroot on Ubuntu including just ...
0
votes
1answer
1k views

Extend Jailkit with command [closed]

I am running ISPConfig 3 using Jailkit on my server and need to add mercurial to all existing and new jailkit account. From what I understand, it will only be applied for new users.. how can I add ...
0
votes
2answers
280 views

Trying to ChrootDirectory an SFTP user to their home directory

I have followed a few examples of how to do this, all of them end up with modifying sshd_config to Subsystem sftp internal-sftp Match User chubbyninja ChrootDirectory %h AllowTCPForwarding ...
0
votes
2answers
212 views

Enable non root user to upload/download onto website directory

I have a website in my VPS. I install Debian 7 on that VPS. My http document is located in directory /var/www/example.com I installed Nginx on that server and directory /var/www/example.com is owned ...
6
votes
4answers
3k views

Difference between chroot and jail

I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the ...
2
votes
4answers
4k views

Webserver: chrooted PHP gives mysql.sock error when attempting to reach mysql

Hey guys, I've configured an Ubuntu webserver with Nginx + PHP5-FPM. I've created a chrooted environment (using jailkit) that I'm tossing my developers into, from where they can develop their test ...
-1
votes
1answer
73 views

I can't create chroot user with full permissions

I am trying to create chroot user but i want to give him a permissions to create and delete files and directories. I have Ubuntu server installed on virtualbox and i am connecting to it from my host ...
0
votes
1answer
275 views

Files uploaded using FileZilla with SFTP are missing permissions

I am using chroot in sftp. And it works perfectly, but files uploaded with FileZilla are stored without any permissions (basically 000). ---------- 1 cwsftp sftp 4364328 Jan 19 16:02 ...
0
votes
0answers
112 views

PHP FPM, chroot can't connect to AWS RDS

I've been experimenting with chroot'ing php-fpm pools via the built-in chroot method in php's pool config. This is for the purpose of hosting multiple wordpress websites on the same AWS EC2 instance. ...
6
votes
3answers
7k views

Trying to setup chroot'd rsync

I'm trying to set up a backup server. I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync. I quickly discovered that I was not the only one trying to do ...
0
votes
2answers
142 views

Support needed creating Dovecot listener on Debian ( postfix)

I would like to create a dovecot lmtp listener under /var/spool/postfix/private/. Because postfix runs chrooted by default under debian. How can I do this? Grtz
0
votes
1answer
188 views

Chef installation in a chroot (packer): not starting services

I'm trying to use packer.io to create a machine image for a server who's deployment I already have automated using Chef (chef-solo specifically), using the amazon-chroot builder and the chef-solo ...
0
votes
4answers
8k views

Custom initrd init script: how to create /dev/initctl

I have a virtual machine (VMM is Xen 3.3) equipped with two IDE HDD's (/dev/hda and /dev/hdb). The root file system is in /dev/hda1, where Scientific Linux 5.4 is installed. /dev/hdb contains an empty ...
0
votes
1answer
106 views

sftp login issue with chroot

I want to be able to create a structure for hosting multiple sites. I want the user files to reside inside /var/www/sites/domain.com and the sftp access to be restricted with chroot. I've followed ...
0
votes
1answer
201 views

Configuring Chroot for SFTP Users

I am trying to configure a SFTP server for some automated backups. I configured an Ubuntu 14.04 server and have had partial success. The idea I'm looking to do is this: A user will be created for ...
2
votes
1answer
324 views

How to 'apt-get upgrade' a debootstraped chroot jail from outside?

I have a daemon running in a chroot jail that I have generated with debootstrap. I'd like to remove apt and dpkg from the jail, but I want to keep the other packages updated. Can I upgrade the ...
0
votes
1answer
331 views

Chrooting Shell Environment on debian wheezy

I created a chrooted user on a directory /home/jail, Inside my /home/jail are the bin,dev,etc,home,lib,lib64 and usr directories. /home/jail/ {bin,dev,etc,home,lib,lib64,usr} are all owned by ...
0
votes
1answer
67 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...
1
vote
2answers
2k views

“No input file specified” when running php under fastcgi inside chroot under nginx outside of chroot

I have a scenario with nginx/1.4.6 running on Ubuntu 14.04 but with php/5.2.10 inside a chroot Ubuntu 9.10 (Karmic Koala). My issue is that all requests to php files result in the dreaded "No input ...
0
votes
2answers
76 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
0
votes
1answer
160 views

Chrooted user logged out immediately after login

I am trying to use chroot to setup a user who can login via ssh and limit access to the /var/www directory. The server is on AWS running Amazon Linux 64-bit, openssh installed. I used ssh-keygen to ...
1
vote
1answer
906 views

How to run “apt-get” in chroot from systemrescuecd?

I boot with systemrescuecd 4.3.1, and run like below. $ mkdir /tmp/os $ mount /dev/sda1 /tmp/os $ mount -o bind /sys /tmp/os/sys $ mount -o bind /dev /tmp/os/dev $ mount -o bind /proc /tmp/os/proc $ ...
2
votes
5answers
1k views

How secure is SSH ForceCommand on a jump host?

I have the following setup in my network: Internet <--> Bastion <--> Local Network I have several users and each user is assigned to a specific machine. Or in other words: Each user ...
0
votes
1answer
382 views

chroot with sftp on centos 6.5

I'm trying to get sftp working with proper chroot configuration on Centos 6.5 server. As for now I get: sftp user@000.000.000.000 User@000.000.000.000's password: Write failed: Broken pipe Couldn't ...
0
votes
1answer
297 views

Chrooted user can't login with SSH

I created a new user with no shell access like this: useradd -g www -d /www/user01 -p ****** -s /sbin/nologin user01 Then in my sshd_config I add those lines: AllowUsers user01 user02 manager ...
1
vote
0answers
366 views

Page displays “File not found” when I enable php-fpm chroot on debian wheezy apache2.2

I set up a chroot jail for a user "bob". bob is located in /var/jails/bob Bob has a site which is located in /var/jails/bob/bobssite.com/public_html Everything seems to work so far, including the ...
1
vote
2answers
181 views

VSFTPD seems to ignore the configuration settings

I have been batling with vsftpd for days now. I started with trying to setup seceure vsftpd on my current Centos 5.6 server but could not lock users down to their home directories. I spent days ...
0
votes
2answers
139 views

server side cd on sftp client connect

Is there a way with sftp to have it configured server-side to run a cd command when a client connects? I have my users thrown in to chroot, the folder has to be root:root chowned and cannot be ...
0
votes
1answer
276 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
0answers
328 views

ProFTPD - User can't create directory when in a chroot jail

I've got a CentOS release 6.5 with Webmin and configured ProFTPd 1.34. I've put my users in a chroot jail. When they logon they are chrooted to their own home directory. But there is a problem when ...
2
votes
2answers
2k views

nginx+php-fpm(chroot). No input file specifed

OS: Centos PHP: 5.5.6 Nginx: 1.4.4 Nginx conf server { listen 80; server_name example.ltd; root /srv/example.ltd/www; index index.php; access_log /srv/example.ltd/logs/nginx-main.log main; ...
0
votes
1answer
215 views

How to keep jailed users from changing directory to parent dirs?

I've chroot users with chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and I'm the only user in the chroot_list file. Other users log in jailed but when they ...
0
votes
1answer
239 views

How do I properly chroot Nginx and uwsgi?

I have a pretty good idea of how to do this, I just wanted to make sure I wasn't going to be seriously screwing stuff up before I deployed it. I have a web application which uses uwsgi and nginx, and ...
1
vote
1answer
254 views

chroot 64 bit -> 32 bit = 'command not found'

Very obviously 32 bit cannot chroot to 64 bit but I am confident that I have successfully chrooted from 64 bit to 32 bit using Gentoo but when I [root@localhost ~]# mount /dev/vg_atom1/lv_root ...
1
vote
4answers
430 views

How to give developer shell access to use GIT and manage code, nothing else?

In CentOS 6.5 (SElinux off, chroot) with Webmin/Virtualmin (latest version) I want to give a developer access to SSH within /home/site so he can use only git to manage the code. I also want to give ...
2
votes
1answer
116 views

Home/end keys are not working correctly in the bash CLI for a jailed user using PuTTY

I'm using PuTTY to access my U14.04 LTS server via SSH. When I log in using my main account, the number pad keys work fine in the BASH CLI. When I log in to a user who's been jailed using Jailkit, ...
1
vote
1answer
470 views

suPHP : proper use of the chroot feature

I started using suPHP recently, and I'm spending an amazing amount of time debugging the configurations and different compile options to get something that actually works. I've tried contacting the ...
2
votes
1answer
1k views

VSFTPD how chroot not chrooted users in /home?

I need to chroot all local users to their home directories, but one user should have access to all user directories. If I put admin_user in chroot_list_file he has access for whole file system. I want ...
0
votes
1answer
287 views

SFTP restrict users to a few directories

I run a game server and I have a few people that I want to give access too the server to help develop. I am trying to let them have access to only these directories /var/www/Update /root/gamed/config ...
3
votes
1answer
177 views

using /bin/bash in a chroot environment - symlink or mount

A user connects via ssh. The user is also chroot-ed to their home directory. The goal is security. Since the user is chroot-ed, when they login /bin/bash is not found. Obviously the user needs ...
2
votes
1answer
518 views

chroot user to var/www/html

Can I limit a user login through sftp only can see and change files under var/www/html folder? I tried below, but then I can't login in Transmit through sftp # adduser user_www # passwd user_www # ...
1
vote
2answers
5k views

Chrooted SFTP user - Write permission denied even for owner

On CentOS release 6.5 (Final) I created a restricted user test1 useradd -s /bin/false test1 and configured ssd_config as following Subsystem sftp internal-sftp Match User test1 ...
11
votes
4answers
3k views

Why running named(bind) in chroot is so important for security? Or maybe it is not ?

I'm playing with bind and started wondering why this software is for example in CentOS running in chroot. Don't misunderstood me I know what bind is and what chroot (jail) is for. But my main wonder ...
3
votes
1answer
464 views

build user chroot on first login

I'm using ldap for remote user authentication and I basically need to either figure out how to: a. chroot a user on machine b from machine a via nfs,(which doesn't seem possible without mounting ...
-1
votes
2answers
4k views

Chrooted ssh user cannot ssh into server : broken pipe

I just tried the following to add a new user, chroot the user and give him access to the folder /home/me/public_html via sftp and ssh : ##the following command are done by root or a sudo user useradd ...