A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

learn more… | top users | synonyms

3
votes
0answers
612 views

Can socat be used to forward an ssh-agent socket into a chroot?

I'm building custom Debian environments on a remote server, which I connect to over SSH. This involves building a debootstrap environment, then chrooting into it to run a custom installer. As part of ...
0
votes
3answers
274 views

FTP server configuration

Hi I am configuring VsFTPd 2.2.2 server on Debian 5.0. I want user after login can see and edit just two dirs: /home/user/ /var/www/project1/ /var/www/project2/ Possible solutions I can Chroot ...
1
vote
3answers
882 views

Help on chroot sftp user

I have 5 sites all under /home/mainuser. I have created user in /home/user1, currently the sftp works and the user is jailed to his folder. However, I want it to have access to 2 sites in ...
2
votes
2answers
70 views

Jail on a http only server

Does it make sense to set up a chroot jail for a apache server which is the only service on the server? Or it is pointless, because the server is in either way lost if it get hacked?
10
votes
2answers
32k views

chroot fails - cannot run command `/bin/bash': No such file or directory

I'm a chroot novice trying to make a simple chroot jail but am banging my head against the same problem time and time again... Any help would be massively appreciated I've created a directory ...
11
votes
4answers
8k views

Is there a windows equivalent to chroot?

On a *nix system I can use a chroot to isolate 2 processes from each other and from the rest of the system. Is there any similar security system under windows? Or is there any way to prevent 2 ...
2
votes
2answers
316 views

Apache Error Log - “Web Path” instead of Filesystem Path

I'm running Apache on Linux and I'm using OpenSSH to provide SFTP access to some customers so they can upload their pages and also look at their respective site logs (access & error). I'm using ...
2
votes
2answers
989 views

Is it advisable to run Apache in a chroot jail?

I have been advised by a sysadmin guy I know, to run Apache in a chroot jail, for increased security. I have the following questions: Is this advisable (i.e. are there any 'gotcha's that I need to ...
1
vote
2answers
311 views

CHROOT for shell script testing

I am looking at setting up a shell script in order to properly document and automate the process I am using to setup a few servers we have. In order to test the shell script through its different ...
1
vote
2answers
268 views

How can I install ubuntu server in a chroot environment?

I am using Ubuntu Karmic desktop. I want to install Ubuntu 8.04 LTS server in a chroot environment. Can anyone provide instructions on how to do this?. A Google search does not bring up anything ...
1
vote
1answer
364 views

question about chroot

I used chroot to install Debian Lenny on my Ubuntu desktop. I have now decided I will no longer be using Debian and so I want to remove Debian and install Ubuntu server in a chroot instead. My ...
2
votes
2answers
845 views

Is Chrooting apache/mysql/php a standard practice of securing web servers containing sensitive data?

Is Chrooting apache/mysql/php a standard practice of securing web servers containing sensitive data (is it necessary)?
1
vote
1answer
915 views

chroot'ing SSH home directories, shell problem

I am trying to chroot my SSH users to their home directories and it seems to work.. in a strange way. Here is what I have in my sshd_config: Match group restricthome ChrootDirectory %h The ...
4
votes
2answers
1k views

What is the secure way to isolate ftp server users on unix?

I've read documentation for various ftp daemons and various long threads about the security implications of using a chroot environment for an ftp server when giving users write access. If you read the ...
0
votes
2answers
203 views

On Ubuntu, how to design a monitor to run a process when a file is written to a directory?

I want to run a process when a file is written to a directory on Ubuntu. I understand I can write a monitor to do this. (ie not an event based trigger but a 'monitor'). To implement this - other ...
2
votes
2answers
12k views

How to run tomcat6 on ubuntu as root?

I've got an existing software package that runs on Ubuntu that uses a chroot jail and so needs to be run as root. I want to exec this from a java web application running within Tomcat6 on Ubuntu, so ...
7
votes
4answers
6k views

Ubuntu - can non-root user run process in chroot jail?

Is it possible for a non-root user to run a chroot process on Ubuntu?
0
votes
2answers
2k views

sftp chroot access via SSH

I have this setup in sshd_config: AllowUsers test1 test2 Match group sftpgroup ChrootDirectory /var/www X11Forwarding no AllowTcpForwarding no ForceCommand ...
3
votes
2answers
4k views

Proftpd: How to set default root to a users home directory without jailing the user?

I've installed proftpd on my debian box but I'm having having some trouble with the configuration. In my proftpd.conf I've added; DefaultRoot ~ !ftp_special This works fine in that all users except ...
1
vote
3answers
978 views

Is there an equivalent to MySecureShell for Centos?

I have some issue to install MySecureShell on CentOS 5.4 because I want to use Yum to install it (for maintainability). I get this error : yum install mysecureshell Error: Missing Dependency: ...
0
votes
1answer
1k views

What is the easiest and cleanest way to create a chrooted SFTP on Centos 5.4?

I would like to setup a SFTP with chroot (or equivalent) login to my Centos 5.4 server in a clean way. By clean way I mean by using only the YUM command if possible and with something easy to maintain ...
2
votes
2answers
1k views

Is MySecureShell a good way to manage SFTP user with chroot on a Centos Server?

I need to setup my Centos 5.4 server for SFTP with chrooted access only (or equivalent). The regular solution using RSSH find here : ...
2
votes
1answer
1k views

Is there an available repository to update OpenSSH to 4.8+ on Centos 5.4?

I need OpenSSH 4.8+ in order to do setup a clean chrooted SFTP on my Centos 5.4 with Remi and EPEL repositories. Is there a repository for Centos which contain an updated OpenSSH? Thanks! Extra ...
0
votes
3answers
256 views

Chrooting SFTP of a particular user

I want to give SFTP access to a particular user but would like to jailroot it so that her view is limited to only her home directory. For the rest of the users of the system, it should remain as ...
1
vote
2answers
2k views

scponly worked but didn't chroot the home folder, the user can still browse the entire server

So I followed the "Chroot and Debian" tutorial in http://sublimation.org/scponly/wiki/index.php/FAQ Then when I log into user "upload" via ssh I have no access to the command line (this is what I ...
0
votes
1answer
926 views

vsftpd restrict local users to home and group directories

i've got vsftpd install on an ubuntu server 9.10 i can use chroot to restrict users to their own home directories but i also want to give them access to a group shared folder for example, users foo1 ...
1
vote
1answer
967 views

Ubuntu Server mod_chroot Apache2 Problem

I am trying to make it so my apache web pages will be in a chroot jail. I have set up my chroot jail as according to https://wiki.ubuntu.com/ModChroot. However when i restart apache i get the ...
2
votes
1answer
1k views

How to set chroot for SFTP under Ubuntu 8.04?

Ubuntu 8.04 LTS comes with OpenSSH 4.7, before the ChrootDirectory parameter was introduced. How can I upgrade OpenSSH to 4.9+? Alternatively, without upgrading OpenSSH, how can I set chroot?
1
vote
1answer
325 views

/dev/null , /dev/random and chrooted bind

Hy, Why a chrooted bind need to mknod dev/null and dev/random ? Howto say it's necessary but without explain reasons, I administrate chrooted bind servers without theses options, and all seems to ...
0
votes
1answer
573 views

Define arbitrary chroot on a per-user basis for VSFTP

I want to set up two FTP users for my server (Ubuntu 8.04): One that logs into /var/www so they can access and administer all the web site files One that is chroot'd to (say) /var/www/images so ...
0
votes
1answer
2k views

Chroot with CentOS 5.3 + openssh 4.3p2

OS: CentOS 5.3, with openssh 4.3p2 Trying to set 'chroot' in ssh shell, but openssh version prior to 4.8 doesn't take below settings. yum update openssh open up to version 4.3 which is quite old. ...
0
votes
2answers
331 views

Chroot within chroot

I'm using Centos 5.2 and when I try to make a chroot jail using the script, I get: Copying libraries for /usr/bin/scp. (0x00007fff17bfe000) cp: cannot stat `(0x00007fff17bfe000)': No such file or ...
9
votes
4answers
2k views

When is it appropriate / prudent to use chroot?

I hear about needing to chroot BIND all the time. Fair enough. But what about other programs? What are the "rules" (either personal or widely accepted/established) for deciding which programs ...
1
vote
3answers
6k views

RHEL 5.4 & Chrooted SFTP

According to release notes, RHEL 5.4 included an update to setup chrooted SFTP accounts natively. But from what I am seeing, it is all or nothing--This means that even root is chrooted if you go this ...
0
votes
4answers
8k views

Custom initrd init script: how to create /dev/initctl

I have a virtual machine (VMM is Xen 3.3) equipped with two IDE HDD's (/dev/hda and /dev/hdb). The root file system is in /dev/hda1, where Scientific Linux 5.4 is installed. /dev/hdb contains an empty ...
2
votes
3answers
653 views

Disable Linux Commands

I'm writing a simple program to back-up some files to a Linux box. The transaction will take place over SSH and each copy of the program will have its own account on the Linux box that it will ...
3
votes
3answers
2k views

Good resource for chrooting Apache2 on Debian

I need a better resource than this or this on how to secure Apache2 using chroot on a Debian system. It seems most articles deal with Apache1. I tried to follow them and adapt to Apache2, but it only ...
0
votes
3answers
609 views

Restricting SSH shell access to Debian server

Still new to the whole Debian thing so bear with me. The only thing I want a user logged in via SSH. No files or directories (like /etc, /var) should be visible at that point. The only thing the ...
0
votes
1answer
1k views

How to run a program inside chroot with stdin/stdout available to caller?

Is there a way to run a program in a chroot while still having access to stdin/stdout? My first attempt was a shell script: /usr/local/bin/real-app: -------- #!/bin/bash chroot /var/lib/app-root ...
2
votes
2answers
2k views

Virtualmin Chroot FTP Users [closed]

Can someone tell me how to chroot FTP users with Virtualmin, if it is possible.
1
vote
1answer
488 views

Chrooting a ftp user to a particular directory

I would like to chroot a user to their home directory on a debian linux server. Im using vsftpd server. I've done it with a user before, and now cant remember how to do it. I've limited ssh access to ...
2
votes
2answers
1k views

What is the right way to chroot perl script?

I created /opt/chroot, create bin lib and other directories in it, copied libraries, bash and perl binaries in proper places. Also I placed my script into /opt/chroot/bin/. Now I can run the script ...
0
votes
2answers
637 views

I need help setting up a chroot jail

I've been following this tutorial http://olivier.sessink.nl/jailkit/howtos_chroot_shell.html to setup a chroot jail for my ssh users. My sshd_config has this in it: Match group backup-users ...
18
votes
5answers
12k views

How can I chroot ssh connections?

I would like to setup a chroot jail for most (not all) users logging in though SSH. I've heard it's possible with the latest versions of openssh, but I've not been able to find out how to do it. The ...
1
vote
3answers
3k views

SFTP to chroot and SSH to manage system in one config?

We have a webserver where users are allowed to upload (SFTP) large files in a chroot environment. We also want to be able to use SSH to manage this server. In our old situation we used the system ...
2
votes
1answer
2k views

Running BIND9 In chroot

I am trying to running bind9, on a ubuntu box, in a chroot jail, as discussed in "Linux System Administration" (Adelstein & Lubanovic). The command "sudo /etc/init.d/bind9 start" is generating ...
4
votes
7answers
1k views

Does using chroot for a publicly-exposed service provide any real security benefit?

I would like a definitive answer as to why this practice should be pursued with services that are exposed to potentially hostile network(s) (i.e. the Internet). As I understand it, there is a method ...
4
votes
3answers
2k views

set up a chrooted SFTP login with OpenSSH

How might I create an SFTP login for an untrusted user in which he can only access the files in his own home directory and not run any commands? The online tutorial OpenSSH SFTP chroot() with ...