A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.
2
votes
0answers
332 views
Can socat be used to forward an ssh-agent socket into a chroot?
I'm building custom Debian environments on a remote server, which I connect to over SSH. This involves building a debootstrap environment, then chrooting into it to run a custom installer. As part of ...
2
votes
2answers
67 views
Jail on a http only server
Does it make sense to set up a chroot jail for a apache server which is the only service on the server? Or it is pointless, because the server is in either way lost if it get hacked?
1
vote
4answers
1k views
Unmounting root filesystem without rebooting the server
I have a server that I can access through SSH. There is no KVM available and there's only one root partition for the whole server.
I have deleted some files that I shouldn't have and want to recover ...
1
vote
2answers
2k views
Virtualmin Chroot FTP Users
Can someone tell me how to chroot FTP users with Virtualmin. If it is possible.
Thanks
--Mark
1
vote
2answers
371 views
When is it not worth putting Apache in a chroot jail?
I don't mean to question the well established security precaution of putting apache in a chroot-jail in most scenarios but in my scenario I have doubts.
We have a virtual server hosting a single ...
1
vote
3answers
3k views
SFTP to chroot and SSH to manage system in one config?
We have a webserver where users are allowed to upload (SFTP) large files in a chroot environment. We also want to be able to use SSH to manage this server.
In our old situation we used the system ...
1
vote
4answers
719 views
Restrict users to their home directory
How do I restrict the user to his current directory only?
I tried the steps mentioned on this page to configure rssh chroot jail to lock users to their home directories only, but this looks too ...
1
vote
3answers
804 views
Help on chroot sftp user
I have 5 sites all under /home/mainuser. I have created user in /home/user1, currently the sftp works and the user is jailed to his folder. However, I want it to have access to 2 sites in ...
1
vote
2answers
7k views
How to run tomcat6 on ubuntu as root?
I've got an existing software package that runs on Ubuntu that uses a chroot jail and so needs to be run as root. I want to exec this from a java web application running within Tomcat6 on Ubuntu, so ...
1
vote
1answer
55 views
SFTP user can't edit or create files
Server: Ubuntu 12.04 LTS
I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/.
bob ...
1
vote
1answer
470 views
Is it possible to allow key based authentication for sshd_cofnig chroot sftp users?
I'm running an Ubuntu 12.04.1 LTS (GNU/Linux 3.2.0-30-generic x86_64) Server, with OpenSSH_5.9p1 Debian-5ubuntu1, OpenSSL 1.0.1 14 Mar 2012.
I'd like to configure chroot for sftp access using ...
1
vote
2answers
275 views
CHROOT for shell script testing
I am looking at setting up a shell script in order to properly document and automate the process I am using to setup a few servers we have. In order to test the shell script through its different ...
1
vote
1answer
677 views
chroot'ing SSH home directories, shell problem
I am trying to chroot my SSH users to their home directories and it seems to work.. in a strange way. Here is what I have in my sshd_config:
Match group restricthome
ChrootDirectory %h
The ...
1
vote
2answers
1k views
scponly worked but didn't chroot the home folder, the user can still browse the entire server
So I followed the "Chroot and Debian" tutorial in http://sublimation.org/scponly/wiki/index.php/FAQ
Then when I log into user "upload" via ssh I have no access to the command line (this is what I ...
1
vote
3answers
6k views
RHEL 5.4 & Chrooted SFTP
According to release notes, RHEL 5.4 included an update to setup chrooted SFTP accounts natively. But from what I am seeing, it is all or nothing--This means that even root is chrooted if you go this ...
1
vote
1answer
167 views
Trying to set up SFTP only in a chroot jail for one user
Hopefully you guys can help and see if I've done something weird here, I'm trying to log in with a user I set up, FileZilla shows me:
Command: open "///@///" Command: Pass: ********
Status: ...
1
vote
2answers
132 views
SFTP post upload hook
How would I run a script after a file has been successfully uploaded over (a chrooted) SFTP?
I have this working on standard FTP connection using PureFTP
...
1
vote
3answers
2k views
chrooting php-fpm with nginx
I'm setting up a new server with PHP 5.3.9 and nginx, so I compiled PHP with the php-fpm SAPI options. By itself it works great using the following server entry in nginx:
server {
listen 80;
...
1
vote
2answers
413 views
Implications that come with chrooting php-fpm
I am creating a production server that will run nginx with php-fpm. I want to have a good mix between securing the server, and still having good quick workflow.
Now one thing that always secures the ...
1
vote
1answer
169 views
Security implications of mount --bind in a chroot environment
Assume you have a chroot environment where you need a resource - an application or a library - which resides on the host (external to the chroot).
Which are the security implications (if any) of ...
1
vote
2answers
1k views
Webserver: chrooted PHP gives mysql.sock error when attempting to reach mysql
Hey guys, I've configured an Ubuntu webserver with Nginx + PHP5-FPM.
I've created a chrooted environment (using jailkit) that I'm tossing my developers into, from where they can develop their test ...
1
vote
2answers
255 views
sendmail not working
I'm trying to use the mail() function in PHP on a Debain Linux server.
I have 2 web servers running. One is in a chrooted setup.
The server that's not chrooted works fine, the other one wont send ...
1
vote
2answers
351 views
Is it possible to mount a subdirectory as the root file system at kernel startup?
I'm trying to install a linux from sources inside my home directory(as oposed to creating a dedicated partition). The basic system(glibc, kernel and init) is installed at $HOME/lfs/root. I'm booting ...
1
vote
1answer
181 views
question about chroot
I used chroot to install Debian Lenny on my Ubuntu desktop. I have now decided I will no longer be using Debian and so I want to remove Debian and install Ubuntu server in a chroot instead.
My ...
1
vote
3answers
681 views
Is there an equivalent to MySecureShell for Centos?
I have some issue to install MySecureShell on CentOS 5.4 because I want to use Yum to install it (for maintainability).
I get this error :
yum install mysecureshell
Error: Missing Dependency: ...
1
vote
1answer
440 views
Chrooting a ftp user to a particular directory
I would like to chroot a user to their home directory on a debian linux server. Im using vsftpd server.
I've done it with a user before, and now cant remember how to do it. I've limited ssh access to ...
1
vote
1answer
54 views
chrooting an application
I have an requirement that requires all applications running on a server in a DMZ to be chrooted. How does one chroot an application using Ubuntu? Are there any good online guides?
1
vote
1answer
162 views
is doing mount -t proc none /proc unsecure for a chroot environment?
What does
mount -t proc none /proc
do inside the chrooted environment?
After doing that, when I run htop or ps aux inside the chrooted environment, I can see the actual root's processes.
Does it ...
1
vote
1answer
2k views
PHP-FPM's chroot and chdir directory
I am setting up php-fpm with chrooting enabled. Now I see that there are two options, and I want to know what the exact difference is.
The setup has:
chroot = /var/www/domains/domain.tld/
; Chdir to ...
1
vote
1answer
280 views
Executing command inside a chroot from an apache/php script
I need to unit test some bash scripts, I have setup a debian squeeze in a chroot.
From command line I can use chroot /directory my-command, ou schroot -d / -u root my-command, but I need to run ...
1
vote
1answer
113 views
How can I set a global sftp chroot for a group (or all) users on a server [duplicate]
Possible Duplicate:
set up a chrooted SFTP login with OpenSSH
I am not familiar with chroot jails so please forgive my ignorance.
From my understanding you would normally chroot a user to ...
1
vote
1answer
222 views
Secure PHP environments with PHP-FPM and SFTP
I'd like to set up secure environments for a small number of untrusted PHP websites on a Debian server. Right now everything runs on the same Apache2 with mod_php5 and vsftpd for administrative file ...
1
vote
1answer
220 views
Is there an equivalent of ToLower for a vsftpd.conf?
I am running a vsFTP server using virtual users. I chroot each user to their own personal subdirectory. For ease of use I would like to make my usernames case-insensitive, but I am having some ...
1
vote
2answers
2k views
OpenSSH 5.3 setting UMASK for SFTP chroot env, dosen't work at all
I tried to override umask setting on SFTP connection in chrooted env.
I couldnt use subsytem diffrente than internal-ftp.
In OpenSSH_5.3p1 (Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009)
there's umask ...
1
vote
3answers
956 views
sftp chrooted dosent work with some sftp client (Cyberduck)
I'm not able working on SFTP+chrooted env
Using internal-sftp directive it works, but i'm not able to set umask. (ex umask 002)
Using sftp-server from openssh package dosent't work because login shell ...
1
vote
2answers
768 views
vsftpd chroot_local_user does nothing
I'm setting up a vsftpd server on:
Linux 2.6.32-26-server #48-Ubuntu SMP Wed Nov 24 10:28:32 UTC 2010 x86_64 GNU/Linux
When I set chroot_local_user=YES, there is no effect (I can still see / when I ...
1
vote
2answers
224 views
How can I install ubuntu server in a chroot environment?
I am using Ubuntu Karmic desktop. I want to install Ubuntu 8.04 LTS server in a chroot environment. Can anyone provide instructions on how to do this?. A Google search does not bring up anything ...
1
vote
1answer
734 views
Ubuntu Server mod_chroot Apache2 Problem
I am trying to make it so my apache web pages will be in a chroot jail. I have set up my chroot jail as according to https://wiki.ubuntu.com/ModChroot. However when i restart apache i get the ...
1
vote
1answer
258 views
/dev/null , /dev/random and chrooted bind
Hy,
Why a chrooted bind need to mknod dev/null and dev/random ?
Howto say it's necessary but without explain reasons, I administrate chrooted bind servers without theses options, and all seems to ...
1
vote
0answers
40 views
Mounting /var/www for File recovery
I'm in the process of recovering my server's files in a "Rescue" mode. Its a Ubuntu 12.04 with 2x3TB in RAID1. The instructions were to SSH into the server in "Rescue" mode, mount the partitions, ...
1
vote
1answer
134 views
Add write permissions for chroot user on centOS 6
I've a jailed user "ftest" (in /home/ftest) but he can't create files or folders within the jail.
User was added by:
useradd -g nginx -G sftpjail -s /bin/false
Permissions and owners are:
755 ...
1
vote
0answers
35 views
Chrooted from LiveCD: Bad IO performace
my Ubuntu Server installation is broken, so I grabbed a Ubuntu Desktop CD, mounted my Ubuntu installtion on my hard disk and chrooted into it.
But now my IO performance is really bad:
# time dd ...
1
vote
1answer
227 views
SSH - SFTP/SCP only + additional command running in background
there are many solutions described to get ur SSH-connection forced to only run SFTP by modifying the sshd_config by adding a new group match and give that new group a Forcecommand internal-sftp
Well ...
1
vote
1answer
184 views
Jailkit not locking down SFTP, working for SSH
I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root:
mkdir /var/jail
jk_init -j /var/jail ...
1
vote
0answers
358 views
PureFTPd : ChrootEveryone not working
I have a fresh install of Ubuntu 12.04 with pure-ftpd version 1.0.35-1. I don't use database for the only user I have (ftpuser1 - localuser), but I want to lock him into his home directory. ...
1
vote
1answer
1k views
ubuntu bind9 AppArmor read permission denied (chroot jail)
I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system
I am getting the following errors in my syslog:
Jul 27 ...
1
vote
1answer
129 views
Chroot / sFtp / Ftps Problems
regular debian admin, i am faced to a complex situation and i appreciate your advices...
I have a server with chroot environment that is working without problems up to now :
Chroot user : store
...
1
vote
1answer
138 views
installing debian with debootstrap and lxc instead of debootstrap and chroot
So I need to 'install' (or rather prepare a root filesystem for) a Debian system and that was done with debootstrap and chroot before. However due to the not-very-existent isolation of chroots (with ...
1
vote
0answers
164 views
update grub2 without hardware access (e.g. in a chroot)?
I'm writing a script that takes a master KVM image, converts it to VDI, makes a few changes to it,
and offers it up for download.
I need to update the kernel boot parameters for some of the newly ...
1
vote
2answers
310 views
PHP-FPM, chroot, Ubuntu Precise 12.04, and no access to DNS
There's a plenty of advices across the Internet on how to enable DNS in chroot.
The problem is that there's no /lib/libnss* files in the Ubuntu Precise.
I've tried to copy these files from /etc/: ...
