A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms

3
votes
1answer
1k views

SFTP user can't edit or create files

Server: Ubuntu 12.04 LTS I am using openSSH and have created an SFTP user called bob who belongs to group sftponly. I have chrooted bob to his home directory which is /usr/share/nginx/www/bob/. bob ...
0
votes
1answer
550 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
0
votes
1answer
66 views

updatedb within chroot

I'm running a Debian wheezy under chroot and I notice that updatedb doesn't work ! I think it's because of missing entries inside fstab. Am I wrong ? Any advice to fix this ?
0
votes
2answers
755 views

CURL in PHP chroot'ed environment

How can I find out what files or sockets are needed by Curl when running in a chroot'ed PHP environment on Mac OSX? I recently secured my website by chrooting PHP but now every call to Amazon S3 ...
0
votes
1answer
707 views

Postfix chroot jail doesn't work

Trying to setup Postfix to run chrooted. Only bit of info on this comes from the man page which simply says to follow the instructions in master.cf. master.cf is self explanatory, just set 'y' in the ...
1
vote
1answer
476 views

Add write permissions for chroot user on centOS 6

I've a jailed user "ftest" (in /home/ftest) but he can't create files or folders within the jail. User was added by: useradd -g nginx -G sftpjail -s /bin/false Permissions and owners are: 755 ...
1
vote
2answers
448 views

Setting up chrooted shell accounts with schroot and debootstrap on Ubuntu 10.04

UPDATE: I never did get this figured out. Instead i ended up jsut using jailkit since there is a ton (though sometimes outdated) documentation on usage. Id still be interested in knowning how to get ...
6
votes
1answer
3k views

Trying to set up SFTP only in a chroot jail for one user

Hopefully you guys can help and see if I've done something weird here, I'm trying to log in with a user I set up, FileZilla shows me: Command: open "///@///" Command: Pass: ******** Status: ...
0
votes
2answers
524 views

OpenBSD Apache configuration: NFS mount

I have a NFS mount at /mnt/web/ on OpenBSD 5.2. How can I mount this so it's accessible to the web? Currently I'm soft linking it to /var/www/web ln -s /mnt/web /var/www/web I've added an alias ...
0
votes
0answers
64 views

sftponly with symlink

I did the sftponly trick with sshd. Is there an option to make it following symlinks with to other directories that do not belong to the user? Match Group sftponly ChrootDirectory /var/sftp/ ...
10
votes
3answers
1k views

RedHat: is it possible to install packages in a kind of mock environment to build RPMs

Is there a tool that allows to install the dependecies of an RPM .spec into an isolated environment? I won't install such dependencies globally on the system and I am not able to do so since I have ...
0
votes
1answer
436 views

Chrooted nginx, fastcgi, and cgit

I'm running a Debian server with nginx chrooted in /var/chroot/nginx. It works wonderfully, but I'd like to be able to run cgit and host my gitolite repositories. When it was out of the chroot it ...
6
votes
2answers
1k views

Why chroot is considered insecure?

I've been playing around with CentOS box for couple of years now. So I'm pretty comfy with terminal. However, I read a lot of blog-post claiming that chroot is insecure and amount of those posts ...
0
votes
1answer
372 views

gcc sandboxing tool - AppArmor / CHROOT jail on Ubuntu 12.04

We have a Node application as the front end to a C++ sandboxing tool, which compiles code using gcc and outputs the result to the browser. e.g. exec("gcc -o /tmp/test /tmp/test.cpp", function ...
1
vote
0answers
54 views

Chrooted from LiveCD: Bad IO performace

my Ubuntu Server installation is broken, so I grabbed a Ubuntu Desktop CD, mounted my Ubuntu installtion on my hard disk and chrooted into it. But now my IO performance is really bad: # time dd ...
0
votes
1answer
2k views

SFTP, Chroot problems on Redhat

I'm having problems setting up sftp with a ChrootDirectory. I've done an equivalent setup on other distros, but for some reason I cannot get it to work on a Redhat AMI. The changes to my sshd_config ...
0
votes
1answer
251 views

How to allow access to binaries outside a root'ed directory

At Heroku I can use binaries like ImageMagick and others, but the filesystem seems chroot'ed and a clone of the web application directory (git repository). How do I allow access to binaries outside ...
1
vote
1answer
484 views

SSH - SFTP/SCP only + additional command running in background

there are many solutions described to get ur SSH-connection forced to only run SFTP by modifying the sshd_config by adding a new group match and give that new group a Forcecommand internal-sftp Well ...
1
vote
1answer
897 views

Jailkit not locking down SFTP, working for SSH

I installed jailkit on my CentOS 5.8 server, and configured it according to the online guides that I found. These are the commands that were executed as root: mkdir /var/jail jk_init -j /var/jail ...
11
votes
1answer
8k views

SFTP: file symlinks in a jailed (chrooted) directory

I'm trying to set up sftp so that a few trusted people can access/edit/create some files. I have jailed a user into their home directory (/home/name) but have run into a problem. I want for them to ...
5
votes
4answers
794 views

Is there a chroot build script somewhere?

I am about to develop a little script to gather information for a chroot-jail. In my case this looks (at the first glance) pretty simple: The application has a clean rpm-install and did install ...
2
votes
2answers
280 views

can not run java inside grsec chroot

java runs well inside common chroot. however in a grsec hardened chroot it complains it has no enough memory to build VM. any ideas of how to make it run cause i really need a hardened chroot. ...
0
votes
1answer
4k views

Chrooted user does not start in his home directory and does not load his bash_profiles

If the users logs in, he starts in / of the chroot (Which is /var/jail on the real machine). I would like him to start in his home-dir. Also, he seems not to load any of his profile-files (.bash.rc ...
0
votes
1answer
105 views

Chroot seems to be missing some progs/libs. What's necessary to get default commandline behaviour?

I've set up a chrooted environment using this tutorial. But the commandline isn't displayed correctly. Instead of the usual user@hostname:/home/user# it displays -bash-4.1$. What programs are needed ...
2
votes
3answers
1k views

Setting up a chroot sftp on debian server

I'm trying to allow a user "user" to access my server by either sftp or ssh. I want to jail them into a directory with chroot. I read the instructions here however it does not work. I did the ...
0
votes
1answer
401 views

Chroot to jail users into a directory [duplicate]

Possible Duplicate: How can I chroot ssh connections? I want to jail a particular user into a directory (so they can sftp and ssh) using chroot on Debian. How can I do this? The man page ...
0
votes
1answer
116 views

A specific user is unable to log in to vsftpd

I am setting up a new user let his name be ftpguy. He has access to only one directory /var/www/xxx. I have already chowned the directory so that he has write and read privileges. The user is also ...
1
vote
2answers
762 views

openssh sftp chroot

I chrooted a user to the directory /var/www/upload using ChrootDirectory /var/www/upload in my etc/ssh/sshd_config. The permissions of all the files in var/www/upload is 755 and owner is ...
2
votes
2answers
676 views

SFTP post upload hook

How would I run a script after a file has been successfully uploaded over (a chrooted) SFTP? I have this working on standard FTP connection using PureFTP ...
1
vote
0answers
881 views

PureFTPd : ChrootEveryone not working

I have a fresh install of Ubuntu 12.04 with pure-ftpd version 1.0.35-1. I don't use database for the only user I have (ftpuser1 - localuser), but I want to lock him into his home directory. ...
2
votes
2answers
6k views

User can't SFTP after chroot

Ubuntu 10.04.4 LTS I'm trying to chroot the user 'sam'. According to all the articles out there this should work, but apparently I'm still doing something wrong. The user: ...
1
vote
1answer
3k views

Is it possible to allow key based authentication for sshd_cofnig chroot sftp users?

I'm running an Ubuntu 12.04.1 LTS (GNU/Linux 3.2.0-30-generic x86_64) Server, with OpenSSH_5.9p1 Debian-5ubuntu1, OpenSSL 1.0.1 14 Mar 2012. I'd like to configure chroot for sftp access using ...
8
votes
4answers
7k views

OpenSSH anything like 'internal-sftp' but for SCP?

I'm running Debian stable and I'm looking to establish the following environment for users in my 'sftponly' group: jailed can transfer with SFTP can transfer with SCP cannot login interactively with ...
0
votes
2answers
1k views

Chroot on startup

I have a script that runs on startup, but it wont launch a application in chroot. #!/bin/sh /usr/sbin/chroot /root/chrootdir/ /bin/sh -c "lighttpd -f /etc/lighttpd.conf -m /lib" echo "script ...
9
votes
2answers
12k views

SFTP fatal bad ownership or modes for chroot directory ubuntu 12.04

I just set up my SFTP server and it works fine when I use it from my first user account. I wanted to add a user which we will call 'magnarp'. At first I did like this in sshd_config: Subsystem sftp ...
3
votes
1answer
277 views

Link all LXC node APT caches to the host machine's APT cache

I have a number of LXC containers (ubuntu template) which all have their own separate APT caches. /var/lib/lxc/*/rootfs/var/cache/apt/archives/ I would like to have these linked to the host ...
0
votes
1answer
1k views

PHP-FPM Chroot jail corrupts timezone db?

I'm trying to setup a PHP-FPM Chroot jail on a new CentOS 6.3 box. I can get the chroot to work fine, in the sense that I can get php scripts to respond and echo things out. But, every time I use the ...
2
votes
3answers
4k views

ubuntu bind9 AppArmor read permission denied (chroot jail)

I am trying to run bind9 with chroot jail. I followed the steps mentioned at : http://www.howtoforge.com/debian_bind9_master_slave_system I am getting the following errors in my syslog: Jul 27 ...
3
votes
2answers
801 views

How to map authenticated Nginx users to their own directory?

I am writing a social networking site in C and serving it all up with Nginx. How can I make it so that authenticated users go to their own directory -ONLY- where a user-specific index.html resides. ...
1
vote
1answer
176 views

Chroot / sFtp / Ftps Problems

regular debian admin, i am faced to a complex situation and i appreciate your advices... I have a server with chroot environment that is working without problems up to now : Chroot user : store ...
1
vote
1answer
223 views

installing debian with debootstrap and lxc instead of debootstrap and chroot

So I need to 'install' (or rather prepare a root filesystem for) a Debian system and that was done with debootstrap and chroot before. However due to the not-very-existent isolation of chroots (with ...
0
votes
1answer
179 views

how to make sure that Apache processes is chrooted?

I am using Apache 2 on Debian 6. I tried to make Apache by using following resource: http://www.debian.org/doc/manuals/securing-debian-howto/ap-chroot-apache-env.en.html how can i be sure that Apache ...
3
votes
2answers
801 views

update grub2 without hardware access (e.g. in a chroot)?

I'm writing a script that takes a master KVM image, converts it to VDI, makes a few changes to it, and offers it up for download. I need to update the kernel boot parameters for some of the newly ...
3
votes
1answer
481 views

Resource consumption of FreeBSD's jails

Just for curiosity. An example machine: an dedicated amd64 server with the last stable version of FreeBSD and UFS for the partitions. How much resources consume FreeBSD for each empty jail? I mean, I ...
1
vote
2answers
633 views

PHP-FPM, chroot, Ubuntu Precise 12.04, and no access to DNS

There's a plenty of advices across the Internet on how to enable DNS in chroot. The problem is that there's no /lib/libnss* files in the Ubuntu Precise. I've tried to copy these files from /etc/: ...
0
votes
2answers
664 views

chroot'ing Apache to prevent shell scripts?

Recently I'm being told that a user has my system 'shelled.' While there hasn't been any unusual activity or errors in Apache error log, etc.. I'd rather be safe than sorry. So: If I run chroot ...
3
votes
2answers
8k views

chrooting user causes “connection closed” message when using sftp

First off I am a linux newbie so please don't assume much knowledge. I am using CentOS 5.8 (final) and using OpenSSH version 5.8p1. I have made a user playwithbits and I am attempting to chroot them ...
1
vote
1answer
227 views

How can I find out the path to a chrooted environment in which a particular daemon was started?

I have a setup with several directories where I can chroot and start the same daemon from. I'd like to be able to tell from which of my multiple directories I started the daemon. I'd like to find it ...
0
votes
2answers
825 views

nginx & php-fpm & clean urls

Hello i would like set up nginx like I want. I have read a lot of manuals (including official) but i can't make it work as I expect. I have next urls: /user/register, /user/login, /user/logout etc ...
0
votes
2answers
558 views

Ubuntu SFTP & Chrooting

I've been looking around for a few days now, playing around with configurations and following tutorials on this. I Have two groups: dev and sftp. Users within the dev group are also part of the ...