Add write permissions for chroot user on centOS 6

Question

I've a jailed user "ftest" (in /home/ftest) but he can't create files or folders within the jail.

User was added by:

useradd -g nginx -G sftpjail -s /bin/false

Permissions and owners are:

755 root:sftpjail /home/ftest
755 ftest:nginx /home/ftest/test1
755 ftest:sftpjail /home/ftest/test2
777 ftest:nginx /home/ftest/test3

The chroot sftp login is working just fine, but unfortunately it's not possible to write to any of the testX folders.

afaik jail exists only on FreeBSD. Are you talking about chroot or jail? — , Feb 15 '13 at 12:20

score 0 · Answer 1 · answered Feb 15 '13 at 12:58

0

The problem is the ftest user doesn't have write permissions on his home directory.

/home/ftest is owned by root user and sftpjail group. ftest is indeed a member of sftpjail, but the 755 permission means the group can only read, not write from there.

You have 2 options here, either change the ownership to ftest:sftpjail, and keep the permissions 755, or keep theownership as is, but change permissions to 775.

I believe creating files inside the test folders is working fine though, right?

answered Feb 15 '13 at 12:58

Waleed Hamra

751
6
16

Unfortunately that's not an option. I tried both but the chroot only works with root:root and 755 – Thorsten Scheckenbach Feb 15 '13 at 13:37
what do you mean by "only works with.."? is there some error? can you elaborate? – Waleed Hamra Feb 15 '13 at 14:22
If the rights of the home directory are wrong I can't login via sftp. I always get asked for a password which is not set for ftest user which has an rsa-key set. – Thorsten Scheckenbach Feb 15 '13 at 14:42
but that relates to the permissions of .ssh/authorized_keys only, no? – Waleed Hamra Feb 15 '13 at 19:37
No, the log says: "bad ownership or modes for chroot directory" – Thorsten Scheckenbach Feb 20 '13 at 13:08

Add write permissions for chroot user on centOS 6

1 Answers1