New answers tagged chroot
apparmor="DENIED" operation="open" profile="/usr/sbin/named" name="/var/named/run-root/etc/named.conf" It says, it need permissions to access these folders. You should add /var/named/** r, in /etc/apparmor.d/usr.sbin.named then it works.
Your permissions on / are too open. I wonder how you ended up with that. That should be 0755. So you'll need to change that. The rest looks OK.
When not using chroot or internal-sftp, the OpenSSH package uses a program named sftp-server to handle incoming SFTP sessions. The documentation for sftp-server lists a command-line option for the starting directory: -d start_directory specifies an alternate starting directory for users. The pathname may contain the following tokens that are expanded ...
The OpenSSH sshd_config documentation is pretty clear about the requirements for the chroot directory. The restriction applies any time the ChrootDirectory directive is used: ChrootDirectory Specifies the pathname of a directory to chroot(2) to after authentication. All components of the pathname must be root- owned directories that are not ...
internal-SFTP provide an easy way to chrooted SFTP, with some limitations indeed. If you want to avoid limitations like root-owned parent dir, you have to use sftp-server, but you have to create some minimal chrooted environment for user, with bash, cd, ls and so forth. Chrooted environment should be created as described here: ...
Top 50 recent answers are included