Questions tagged [chroot]

A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

413 questions
0
votes
1 answer

RHEL/CentOS 7 run named-chroot on systemctl named invocation?

How can I make systemd treat calls to systemctl xx named as calls to systemctl xx named-chroot? Under RHEL/CentOS 6 installing the bind-chroot package would set up a chroot'ed environment for BIND, but the control script would remain the same. i.e.…
André Fernandes
  • 969
  • 1
  • 10
  • 25
0
votes
1 answer

How to run a program inside chroot with stdin/stdout available to caller?

Is there a way to run a program in a chroot while still having access to stdin/stdout? My first attempt was a shell script: /usr/local/bin/real-app: -------- #!/bin/bash chroot /var/lib/app-root /usr/bin/app $* Then symlinked it where things…
Mark Renouf
  • 1,373
  • 2
  • 16
  • 22
0
votes
1 answer

How to Isolate users process from core process i.e from kernel processes completely?

Chroot is not good option as stated at many places due to root process can easily exit the chroot Is there any way to isolate the user space completely in *nix based systems?
0
votes
1 answer

Chrooting Apache 2.4 on Debian Jessie with mod_security

I have been advised to chroot my apache2 installation to better secure the sensitive content on the rest of the server. I have installed and setup mod_security properly and can see in the logs that it is chrooting apache2 properly, but systemctl is…
Drew
  • 3
  • 3
0
votes
2 answers

SSH failing for jailed account

I tried to setup a chroot jail for a user account I specifically setup for ssh. I set it up and it seemed to work fine yesterday but today it is not working. It doesn't seem to be an SSH issue since I can SSH in with other user account just fine. …
yz426f
  • 1
  • 2
0
votes
1 answer

SecChrootDir Jailing apache 2.2.X on Centos 6.7

I was trying to do apache jailing on centos 6.7 with modsec. I already built everything even the jail directory and remodeled the config files. httpd(apache) says it started nicely, however its dead. When i try to see its status it says httpd dead…
0
votes
1 answer

How to add user with SFTP access to '/var/www/html/adir' folder on Amazon EC2?

This question is very much related to this question. The answer there is useful, but unfortunately incomplete. How to add user with SFTP/ FTP access to '/var/www/html/website_abc' folder on Amazon EC2 Centos? I want to grant third party access to a…
0
votes
1 answer

internal-sftp -u 002 is ignored for copied files

I configured OpenSSH like this Subsystem sftp internal-sftp Match Group sftp ForceCommand internal-sftp -u 002 AuthorizedKeysFile /home/sftp/ssh/%u ChrootDirectory %h X11Forwarding no AllowTcpForwarding no This configuration…
RafaelKr
  • 101
  • 4
0
votes
1 answer

VSFTPD Cant perform anon uploads. 500 OOPS

I can't get my vsftpd config to allow anon root uploads. $ vsftpd -v $ vsftpd: version 3.0.2 $ cat /etc/vsftpd.conf # Example config file /etc/vsftpd.conf # # The default compiled in settings are fairly paranoid. This sample file # loosens things…
0x0byte
  • 1
  • 2
0
votes
0 answers

Setting up a secure SFTP drop folder for serving web pages

I've set up a chrooted sftp folder following the instructions here: http://www.thegeekstuff.com/2012/03/chroot-sftp-setup/ It works fine, my only problem is it appears there is a glaring vulnerability that could potentially allow information on the…
Jordan Reiter
  • 1,290
  • 4
  • 20
  • 40
0
votes
1 answer

Restrict SFTP folder with PHP permisions

I want an user to have access to /var/www/domain.com/public_html so I followed this tutorials, but with my modifications so I can have my users upload directly to their…
xavip
  • 111
  • 1
  • 3
0
votes
1 answer

vsftpd chroot configuration

I'm having problems setting up correctly VSFTPD with chroot on a Ubuntu 14.04 (LTS) server. No matter what I try, I keep being allowed to freely navigate the server. Here is my /etc/vsftpd.conf file (stripped of the commented…
0
votes
0 answers

SFTP chroot jail not working

Trying to follow this tutorial but for Arch Linux. /etc/ssh/sshd_config: # override default of no subsystems #Subsystem sftp /usr/lib/ssh/sftp-server Subsystem sftp internal-sftp Match Group filetransfer ChrootDirectory %h …
Hugh Guiney
  • 245
  • 2
  • 8
  • 21
0
votes
3 answers

Enable non root user to upload/download onto website directory

I have a website in my VPS. I install Debian 7 on that VPS. My http document is located in directory /var/www/example.com I installed Nginx on that server and directory /var/www/example.com is owned by user www-data and group www-data. I want to add…
user3195859
  • 13
  • 1
  • 4
0
votes
0 answers

PHP FPM, chroot can't connect to AWS RDS

I've been experimenting with chroot'ing php-fpm pools via the built-in chroot method in php's pool config. This is for the purpose of hosting multiple wordpress websites on the same AWS EC2 instance. Its a basic LEMP stack at this point, using an…