Questions tagged [jail]

Jails improve on the concept of the traditional chroot environment in several ways. In a traditional chroot environment, processes are only limited in the part of the file system they can access.

Filter by
Sorted by
Tagged with
4 votes
3 answers
3k views

set up a chrooted SFTP login with OpenSSH

How might I create an SFTP login for an untrusted user in which he can only access the files in his own home directory and not run any commands? The online tutorial OpenSSH SFTP chroot() with ...
Sophie Alpert's user avatar
22 votes
6 answers
22k views

OpenSSH anything like 'internal-sftp' but for SCP?

I'm running Debian stable and I'm looking to establish the following environment for users in my 'sftponly' group: jailed can transfer with SFTP can transfer with SCP cannot login interactively with ...
brianjcohen's user avatar
6 votes
3 answers
4k views

Is there a tool for managing FreeBSD jails that knows about ZFS?

ZFS under FreeBSD lets one assign filesystems to a jail, such that an account in the jail with the appropriate privileges can access the filesystem, create new subordinate filesystems, and so forth. ...
larsks's user avatar
  • 44.7k
4 votes
3 answers
754 views

SFTP access akin to jailed shell

I have a question about creating a user with sort of jailed shell access (actually all is required of this user is an sftp access to one particular directory). Scenario is as follows - I have an ...
RandomWhiteTrash's user avatar
4 votes
4 answers
4k views

It is fair to jail my SFTP users to their home directory?

roots. I'm running an Ubuntu 9.04 (home) Server on my LAN. I currently use it to store little web apps, photos, some subversion repository and stuff like that. My (few) users are friends of mine and I ...
tunnuz's user avatar
  • 427
3 votes
1 answer
2k views

What are the security implications of using allow.sysvipc in a FreeBSD jail

The man page for jail says that allow.sysvipc enables "System V primitives [to] share a single namespace across the host and jail environments..." thus "... processes within a jail would be able to ...
gvkv's user avatar
  • 293
1 vote
1 answer
2k views

Is it possible to run dhcpd3 as non-root user in a chroot jail?

I would like to run dhcpd3 from a chroot jail on Debian Lenny. At the moment, I can run it as root from my jail. Now I want to do this as non-root user (as "-u blah -t /path/to/jail" Bind option). ...
Lenain's user avatar
  • 11
0 votes
3 answers
2k views

Jail users in a directory

I have a vps running debian OS and would like to create user accounts on it. I want it so that when the user logs in with sftp, everything in var appears to be their home directory and they cannot cd ...
dukevin's user avatar
  • 1,630