A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.
Questions tagged [chroot]
413 questions
0
votes
4 answers
Chroot jail not working with VSFTPD
I have been trying for ages to get this to work, to no avail.
I have a VSFTPD server running on Arch. It works fine EXCEPT that users can navigate up the directory tree and view/download files in other user's home directories. I figure that the…
MFB
- 119
- 1
- 1
- 4
0
votes
2 answers
OpenBSD Apache configuration: NFS mount
I have a NFS mount at /mnt/web/ on OpenBSD 5.2.
How can I mount this so it's accessible to the web?
Currently I'm soft linking it to /var/www/web
ln -s /mnt/web /var/www/web
I've added an alias directive in the apache config like so:
Alias /web/…
Bubnoff
- 415
- 7
- 18
0
votes
1 answer
Chrooted nginx, fastcgi, and cgit
I'm running a Debian server with nginx chrooted in /var/chroot/nginx. It works wonderfully, but I'd like to be able to run cgit and host my gitolite repositories.
When it was out of the chroot it would give me the same error as it is giving me now,…
jibcage
- 81
- 2
- 5
0
votes
1 answer
gcc sandboxing tool - AppArmor / CHROOT jail on Ubuntu 12.04
We have a Node application as the front end to a C++ sandboxing tool, which compiles code using gcc and outputs the result to the browser.
e.g.
exec("gcc -o /tmp/test /tmp/test.cpp",
function (error, stdout, stderr) {
if(!stderr) {
…
StuR
- 167
- 2
- 10
0
votes
1 answer
Unable to setup git with jailed user
I have performed below steps to setup jailed user
here username is test3
mkdir -p /home/test3/{dev,etc,lib,usr,bin}
mkdir -p /home/test3/usr/bin
chown root.test3 /home/test3
mknod -m 666 /home/test3/dev/null c 1 3
cd /home/test3/etc
cp…
user145133
- 1
- 1
- 2
0
votes
1 answer
SFTP, Chroot problems on Redhat
I'm having problems setting up sftp with a ChrootDirectory. I've done an equivalent setup on other distros, but for some reason I cannot get it to work on a Redhat AMI.
The changes to my sshd_config file are:
Subsystem sftp …
callwithcurrentconfusion
- 25
- 2
- 5
0
votes
1 answer
How to allow access to binaries outside a root'ed directory
At Heroku I can use binaries like ImageMagick and others, but the filesystem seems chroot'ed and a clone of the web application directory (git repository).
How do I allow access to binaries outside the root?
This is really not a specific Heroku…
Jacob
- 115
- 2
0
votes
1 answer
Chroot seems to be missing some progs/libs. What's necessary to get default commandline behaviour?
I've set up a chrooted environment using this tutorial. But the commandline isn't displayed correctly. Instead of the usual user@hostname:/home/user# it displays -bash-4.1$. What programs are needed to get the "default" linux commandline look?
Stuffy
- 177
- 1
- 1
- 9
0
votes
1 answer
Chroot to jail users into a directory
Possible Duplicate:
How can I chroot ssh connections?
I want to jail a particular user into a directory (so they can sftp and ssh) using chroot on Debian. How can I do this?
The man page says
Usage: chroot [OPTION] NEWROOT [COMMAND [ARG]...]
…
dukevin
- 1,630
- 3
- 18
- 25
0
votes
2 answers
Crossplatform "jail" for an application
We currently have a variety of systems (Linux, Solarix, *BSD, HP-UX ...) on which we are not allowed to install anything into / (but I have root access. That's strange, I know). But we'd like to run Puppet on all of them. So, the obvious idea is to…
0
votes
1 answer
A specific user is unable to log in to vsftpd
I am setting up a new user let his name be ftpguy. He has access to only one directory /var/www/xxx. I have already chowned the directory so that he has write and read privileges. The user is also unable to login via ssh as I have disabled that by…
HackToHell
- 260
- 1
- 4
- 15
0
votes
1 answer
adding ChrootDirectory to sshd_config to jail a user prevents the user to login
i've created an user on ubuntu 10.04 and wanted to jail the user by disabling ssh shell and allow sftp. when there is no ChrootDirectory in the sshd_config the user can login just that it can see other sibling folders.
let's say i only want the…
black sensei
- 609
- 3
- 10
- 25
0
votes
3 answers
Chroot on startup
I have a script that runs on startup, but it wont launch a application in chroot.
#!/bin/sh
/usr/sbin/chroot /root/chrootdir/ /bin/sh -c "lighttpd -f /etc/lighttpd.conf -m /lib"
echo "script activated" >> /log/www.log
the log file is…
Maidenone
- 103
- 1
- 6
0
votes
1 answer
how to make sure that Apache processes is chrooted?
I am using Apache 2 on Debian 6. I tried to make Apache by using following resource:
http://www.debian.org/doc/manuals/securing-debian-howto/ap-chroot-apache-env.en.html
how can i be sure that Apache is chrooted correctly?
if I delete…
Fatemeh
- 1
0
votes
2 answers
I need help setting up a chroot jail
I've been following this tutorial
http://olivier.sessink.nl/jailkit/howtos_chroot_shell.html to setup a chroot jail for my ssh users.
My sshd_config has this in it:
Match group backup-users
ChrootDirectory /home/jail/
But what happens when…
Malfist
- 807
- 3
- 10
- 22