Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [chroot]

A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

413 questions
82
votes
5 answers

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory /var/www/RESTRICTED_DIR Then I restarted ssh. Made…
MultiformeIngegno
  • 1,687
  • 9
  • 26
  • 31
29
votes
1 answer

SFTP: file symlinks in a jailed (chrooted) directory

I'm trying to set up sftp so that a few trusted people can access/edit/create some files. I have jailed a user into their home directory (/home/name) but have run into a problem. I want for them to also be able to access other parts of the VPS…
dukevin
  • 1,630
  • 3
  • 18
  • 25
29
votes
6 answers

Is there a windows equivalent to chroot?

On a *nix system I can use a chroot to isolate two processes from each other and from the rest of the system. Is there any similar security system under windows? Or is there any way to prevent two processes from reading/writing to each others…
Rook
  • 2,655
  • 6
  • 27
  • 35
23
votes
6 answers

Ubuntu - can non-root user run process in chroot jail?

Is it possible for a non-root user to run a chroot process on Ubuntu?
Hawkeye
  • 2,699
  • 9
  • 30
  • 35
20
votes
6 answers

OpenSSH anything like 'internal-sftp' but for SCP?

I'm running Debian stable and I'm looking to establish the following environment for users in my 'sftponly' group: jailed can transfer with SFTP can transfer with SCP cannot login interactively with SSH From my experimentation and research, it…
brianjcohen
  • 301
  • 1
  • 2
  • 3
20
votes
5 answers

How can I chroot ssh connections?

I would like to setup a chroot jail for most (not all) users logging in though SSH. I've heard it's possible with the latest versions of openssh, but I've not been able to find out how to do it. The How To's all talk of patching an old version, and…
Malfist
  • 807
  • 3
  • 10
  • 22
16
votes
4 answers

chroot fails - cannot run command `/bin/bash': No such file or directory

I'm a chroot novice trying to make a simple chroot jail but am banging my head against the same problem time and time again... Any help would be massively appreciated I've created a directory /usr/chroot that I want to use as a jail and created…
Mike Atkinson
  • 191
  • 1
  • 1
  • 6
15
votes
2 answers

vsftp: why is allow_writeable_chroot=YES a bad idea?

There are several thousand blog posts about vsftp and allow_writeable_chroot=YES The common error message: Fixing 500 OOPS: vsftpd: refusing to run with writable root inside chroot () I solved the problem on my server. But one question…
guettli
  • 3,591
  • 17
  • 72
  • 123
15
votes
4 answers

Difference between chroot and jail

I read this tutorial - https://help.ubuntu.com/community/BasicChroot - and what I understood is that, chroot is the process of changing the / while the new restricted environment created is the "jail". But some people say I am wrong and chroot and…
user1437328
  • 251
  • 1
  • 2
  • 5
15
votes
3 answers

Why chroot is considered insecure?

I've been playing around with CentOS box for couple of years now. So I'm pretty comfy with terminal. However, I read a lot of blog-post claiming that chroot is insecure and amount of those posts frightens. Is it really so? Why? I use chroot to…
Aleksandr Makov
  • 310
  • 2
  • 10
14
votes
2 answers

Up-to-date alternatives of rssh or scponly

I need: An scp and sftp server With chroot-ed environment With non-login (ssh not allowed for scp/sftp users) Options and related issues I found: scponly No updates since more than 6 years Does one really need to recompile the whole thing to make…
Julen Larrucea
  • 338
  • 1
  • 3
  • 11
14
votes
2 answers

SFTP fatal bad ownership or modes for chroot directory ubuntu 12.04

I just set up my SFTP server and it works fine when I use it from my first user account. I wanted to add a user which we will call 'magnarp'. At first I did like this in sshd_config: Subsystem sftp internal-sftp Match group sftponly …
Jonathan
  • 143
  • 1
  • 1
  • 4
14
votes
1 answer

PHP-FPM's chroot and chdir directory

I am setting up php-fpm with chrooting enabled. Now I see that there are two options, and I want to know what the exact difference is. The setup has: chroot = /var/www/domains/domain.tld/ ; Chdir to this directory at the start. This value must be an…
Saif Bechan
  • 10,960
  • 10
  • 42
  • 63
14
votes
6 answers

Trying to setup chroot'd rsync

I'm trying to set up a backup server. I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync. I quickly discovered that I was not the only one trying to do something like this, and I found this guide and…
Mark R.
  • 141
  • 1
  • 1
  • 3
14
votes
4 answers

Why is "chroot" never used on Mac OS X?

I've been using Macs for 25 years, and "UNIX" since OS X 10.0.. but I've never really thought much about chroot, nor have I ever really needed or wanted to... It's a simple question, but... under what circumstances would one opt to use "chroot" on a…
mralexgray
  • 1,353
  • 3
  • 12
  • 29
1
2 3
…
27 28