A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms (1)

0
votes
1answer
177 views

How to create chroot jail with ability to change some system settings

How to properly create chroot jail (on Ubuntu, or some some other Linux if not applicable) to make user able to edit system settings (eg. with ifconfig) and be able to communicate with external ...
0
votes
1answer
564 views

Set Users as chrooted for sftp, but allow user to login in SSH

I have setup a ssh server on debian 7, to use sftp connection. I chrooted some user, with this config: Match Group sftpusers ChrootDirectory /sftp/%u ForceCommand internal-sftp But if i ...
6
votes
1answer
4k views

Why use lxc instead of chroot?

One ubuntu server hosts 3 apps all on separate domains. Each app has its own developers. App developers belong to linux "sftp" group. chroot allows password sftp access for each app developer. ...
0
votes
1answer
151 views

How to prevent non-chroot user access to system files

My FTP Server has 5 Users namely user01,user02,user03,user04,user05. Shared Folder /home/ftpusers Inside the folder... /home/ftpusers/user01 /home/ftpusers/user02 ...
0
votes
1answer
195 views

Do any Unix/Linux FTP daemons allow users to be “jailed” without using chroot?

When setting up an FTP account for a specific purpose - e.g. as a drop-point for sharing data files - it seems sensible to give the user access only to the particular directory, and no view of a wider ...
0
votes
1answer
2k views

CentOS 6 restrict user ssh access to his home folder

I am trying to restrict a newly added user to his homedir /home/username. Don't want him to be able to cd out of it. I have this my sshd_config: Match User username ChrootDirectory %h ...
0
votes
2answers
109 views

Need help having a particular setup for vsftp with virtual users with access to a particular folder

as part of some services we are offering to some companies, we have gradually became the hosting providers for them using amazon services. so we host 2 web sites on amazon. the root documents for the ...
0
votes
1answer
103 views

Centos6.4: User home directory for sftp

Currently setting up a Centos6.4 box and are wanting to jail sftp users upon login. I've been following the notes here http://www.thisisnotsupported.com/sftp-chrootjail-on-centos6. But I have one ...
0
votes
1answer
224 views

Is it worth to use chroot when running web applications?

My setup: In production I'm using one virtual server per one web application shard. Shards are behind load balancer. In backstage we run web application + DB on a single virtual server. The ...
0
votes
1answer
714 views

Apache 2.2.4: problems chroot with modsecurity

I've been installed mod_security. If i simply include in the httpd the configuration files of mod_security, it starts normally. Indeed, if i try to add SecChrootDir /mnt/chr , httpd will start, but at ...
0
votes
0answers
150 views

PHP-FPM is not working as expected

I am using Debian Squeeze and set up PHP-FPM with fastcgi. I have several virtual hosts defined on the same host. I defined chroot for each pool configuration but somehow it is possible to change ...
1
vote
1answer
781 views

reseting password not working in KVM guest

I lost the root password for a guest system. I mounted the guest system and changed it to single user mode. Then I used virsh console to access the guest system, which was now in single user mode, ...
-5
votes
1answer
53 views

Process still running from a deleted chroot? [closed]

so I come to you with a somewhat interesting problem. I had a chroot running that had an entire lamp server installed and running on it. I tried to purge and remove the lamp server but messed up ...
2
votes
2answers
873 views

How to setup a public rsync and sftp server

I want to setup a public storage server which allows sftp and rsync (through ssh). I've got it working with a chroot jail and rssh. When the user connects to the server with sftp he can read all the ...
1
vote
2answers
210 views

Easiest way to keep users in their home directory on a web server

I was wondering what would be the easiest and most secured way on a web server to prevent users from browsing directories other than their home folder. I have a mutualised web server with several ...
0
votes
1answer
2k views

Apache + PHP-FPM + chroot results “File not found.” error

I want to set chroot to the DocumentRoot using PHP-FPM pools' chroot attribute. With the settings below, whatever I do I get only a "File not found." error: /etc/php5/fpm/pool.d/example.conf ...
-1
votes
2answers
94 views

SSH stopped working for no reason

Please help. Everything was working fine. How can I connect to the command line now? Configuration Amazon EC2 server Ubuntu & Apache2 Only one user (root - not real name) has SSH access, ...
0
votes
1answer
555 views

How to use abstract names of unix domain sockets with fastcgi in nginx?

I tried some perl examples of unix domain sockets using abstract names: Created a socket starting with a null character: my $socket_path = "\0wibble"; using netstat -nlp I can see the socket: unix ...
0
votes
1answer
246 views

PXE server - ubuntu setting username/password later - is it possible?

so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu. So what I am looking for is a way (possibly hackerish-way) ...
1
vote
3answers
3k views

vsftpd: refusing to run with writable root inside chroot

I want to setup a anonymous only ftp server (able to upload files). Here is my config file: listen=YES anonymous_enable=YES anon_root=/var/www/ftp local_enable=YES write_enable=YESr. ...
1
vote
0answers
242 views

SFTP OpenSSH 5.3 chroot-jail with write access to home directory

I've followed the myriad of tutorials/instructions to setup a CHROOT'ed/Jailed SFTP account, and it works great. However, I need the user accounts to be able to have full write access to their home ...
1
vote
0answers
317 views

Mounting /var/www for File recovery

I'm in the process of recovering my server's files in a "Rescue" mode. Its a Ubuntu 12.04 with 2x3TB in RAID1. The instructions were to SSH into the server in "Rescue" mode, mount the partitions, ...
6
votes
4answers
3k views

Difference between chroot and jail

I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the ...
0
votes
1answer
396 views

Is debootstrap chroot safe?

I followed this tutorial http://wiki.debian.org/chroot on Debian Squeeze AMD64, to get a separated environment. This chroot is really safe? In others chroot tutorials, create a chroot for an ...
0
votes
2answers
455 views

chroot SFTP to another users subdirectory

I've successfully set up SFTP to chroot a user to their home directory. However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me ...
0
votes
1answer
2k views

cygwin sftp chroot cannot view contents of bound mountpoint

I'm trying to give user2 access only to his home directory and full permissions on /cygdrive/e. I created a Data/ directory within his $home, added a bind directive in /etc/fstab (see below), and ...
0
votes
0answers
233 views

openvpn up script execute command in schroot

We would like to control a service in a chroot environment utilising scripts run during an openvpn up and down sequence. Host OS is ubuntu-12-04, chroot environment runs ubuntu-12-10 A session has ...
3
votes
1answer
1k views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
0
votes
1answer
584 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
0
votes
1answer
70 views

updatedb within chroot

I'm running a Debian wheezy under chroot and I notice that updatedb doesn't work ! I think it's because of missing entries inside fstab. Am I wrong ? Any advice to fix this ?
0
votes
2answers
914 views

CURL in PHP chroot'ed environment

How can I find out what files or sockets are needed by Curl when running in a chroot'ed PHP environment on Mac OSX? I recently secured my website by chrooting PHP but now every call to Amazon S3 ...
0
votes
1answer
868 views

Postfix chroot jail doesn't work

Trying to setup Postfix to run chrooted. Only bit of info on this comes from the man page which simply says to follow the instructions in master.cf. master.cf is self explanatory, just set 'y' in the ...
-1
votes
3answers
6k views

Chroot jail not working with VSFTPD

I have been trying for ages to get this to work, to no avail. I have a VSFTPD server running on Arch. It works fine EXCEPT that users can navigate up the directory tree and view/download files in ...
1
vote
1answer
506 views

Add write permissions for chroot user on centOS 6

I've a jailed user "ftest" (in /home/ftest) but he can't create files or folders within the jail. User was added by: useradd -g nginx -G sftpjail -s /bin/false Permissions and owners are: 755 ...
1
vote
2answers
511 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
6
votes
1answer
4k views

Trying to set up SFTP only in a chroot jail for one user

Hopefully you guys can help and see if I've done something weird here, I'm trying to log in with a user I set up, FileZilla shows me: Command: open "///@///" Command: Pass: ******** Status: ...
0
votes
2answers
592 views

OpenBSD Apache configuration: NFS mount

I have a NFS mount at /mnt/web/ on OpenBSD 5.2. How can I mount this so it's accessible to the web? Currently I'm soft linking it to /var/www/web ln -s /mnt/web /var/www/web I've added an alias ...
0
votes
0answers
65 views

sftponly with symlink

I did the sftponly trick with sshd. Is there an option to make it following symlinks with to other directories that do not belong to the user? Match Group sftponly ChrootDirectory /var/sftp/ ...
10
votes
3answers
1k views

RedHat: is it possible to install packages in a kind of mock environment to build RPMs

Is there a tool that allows to install the dependecies of an RPM .spec into an isolated environment? I won't install such dependencies globally on the system and I am not able to do so since I have ...
0
votes
1answer
471 views

Chrooted nginx, fastcgi, and cgit

I'm running a Debian server with nginx chrooted in /var/chroot/nginx. It works wonderfully, but I'd like to be able to run cgit and host my gitolite repositories. When it was out of the chroot it ...
6
votes
2answers
1k views

Why chroot is considered insecure?

I've been playing around with CentOS box for couple of years now. So I'm pretty comfy with terminal. However, I read a lot of blog-post claiming that chroot is insecure and amount of those posts ...
0
votes
1answer
415 views

gcc sandboxing tool - AppArmor / CHROOT jail on Ubuntu 12.04

We have a Node application as the front end to a C++ sandboxing tool, which compiles code using gcc and outputs the result to the browser. e.g. exec("gcc -o /tmp/test /tmp/test.cpp", function ...
1
vote
0answers
57 views

Chrooted from LiveCD: Bad IO performace

my Ubuntu Server installation is broken, so I grabbed a Ubuntu Desktop CD, mounted my Ubuntu installtion on my hard disk and chrooted into it. But now my IO performance is really bad: # time dd ...
0
votes
1answer
1k views

Unable to setup git with jailed user

I have performed below steps to setup jailed user here username is test3 mkdir -p /home/test3/{dev,etc,lib,usr,bin} mkdir -p /home/test3/usr/bin chown root.test3 /home/test3 mknod -m 666 ...
0
votes
1answer
2k views

SFTP, Chroot problems on Redhat

I'm having problems setting up sftp with a ChrootDirectory. I've done an equivalent setup on other distros, but for some reason I cannot get it to work on a Redhat AMI. The changes to my sshd_config ...
0
votes
1answer
294 views

How to allow access to binaries outside a root'ed directory

At Heroku I can use binaries like ImageMagick and others, but the filesystem seems chroot'ed and a clone of the web application directory (git repository). How do I allow access to binaries outside ...
1
vote
1answer
527 views

SSH - SFTP/SCP only + additional command running in background

there are many solutions described to get ur SSH-connection forced to only run SFTP by modifying the sshd_config by adding a new group match and give that new group a Forcecommand internal-sftp Well ...
1
vote
1answer
1k views

Jailkit not locking down SFTP, working for SSH

I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root: mkdir /var/jail jk_init -j /var/jail ...
11
votes
1answer
10k views

SFTP: file symlinks in a jailed (chrooted) directory

I'm trying to set up sftp so that a few trusted people can access/edit/create some files. I have jailed a user into their home directory (/home/name) but have run into a problem. I want for them to ...
5
votes
4answers
897 views

Is there a chroot build script somewhere?

I am about to develop a little script to gather information for a chroot-jail. In my case this looks (at the first glance) pretty simple: The application has a clean rpm-install and did install ...