Questions tagged [chroot]

A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

413 questions
0
votes
2 answers

chroot'ing Apache to prevent shell scripts?

Recently I'm being told that a user has my system 'shelled.' While there hasn't been any unusual activity or errors in Apache error log, etc.. I'd rather be safe than sorry. So: If I run chroot Apache, will it prevent shell scripts being able to…
Tar
  • 265
  • 4
  • 11
0
votes
2 answers

nginx & php-fpm & clean urls

Hello i would like set up nginx like I want. I have read a lot of manuals (including official) but i can't make it work as I expect. I have next urls: /user/register, /user/login, /user/logout etc ... no any urls with php files. So i would like to…
nixer
  • 165
  • 2
  • 3
  • 9
0
votes
2 answers

Ubuntu SFTP & Chrooting

I've been looking around for a few days now, playing around with configurations and following tutorials on this. I Have two groups: dev and sftp. Users within the dev group are also part of the www-data and svn groups. These users are to be chrooted…
Ash
  • 471
  • 1
  • 4
  • 14
0
votes
1 answer

vsftpd chroot_local_user error

When I set chroot_local_user to YES in the vsftpd configuration, I get this error in my ftp client: 220: (vsFTPd 2.3.5) Connected to 23.21.50.255. Cmd: AUTH TLS 234: Proceed with negotiation. Cmd: USER ftpaccess 331: Please specify the…
user68842
0
votes
1 answer

Do I need to chroot BIND 9 if I'm using AppArmor?

Possible Duplicate: bind9 in a chroot jail - necessary or not? I'm redoing my external dns servers and thinking about skipping chroot this time. And using apparmor or selinux as an alternativen. Any thoughts? I'm using team cymrus bind template…
0
votes
1 answer

Chroot SFTP Users

I have an Ubuntu Server, where several users log in to upload some files. Each user has a home directory, in which I 'd like to be chrooted. e.g. user1 connects with sftp to the server and is located at his home directory (e.g. /var/www/user1) and…
Paris
  • 123
  • 1
  • 5
0
votes
2 answers

Support needed creating Dovecot listener on Debian ( postfix)

I would like to create a dovecot lmtp listener under /var/spool/postfix/private/. Because postfix runs chrooted by default under debian. How can I do this? Grtz
Sven
  • 1
0
votes
1 answer

Chroot In .bashrc For User; Operation Not Permitted

I am trying to chroot a user when they login with ssh. So, what I did is added the following line to their .bashrc file: chroot /apps/web When I login with the user though, I am getting: chroot: cannot change root directory to /apps/web: Operation…
Justin
  • 5,328
  • 19
  • 64
  • 84
0
votes
1 answer

How To Create Users Who Are Chrooted At A Directory

Is it possible to have users on linux, who's home directory is still the default /home/joe but when they login via ssh/sftp, they are chroot at /apps/web/? Basically I wanted to keep all users files .bashrc, .bash_profile, .ssh in their home…
Justin
  • 5,328
  • 19
  • 64
  • 84
0
votes
1 answer

Jail CentOS group to single dir (and dir's within) - FTP

What I am ultimately looking to do is jail a group of users to only be able to FTP into their home folder. They should be able to have r&w capabilities within their home folder, and within ALL directories in that folder. I have been trying to do…
sofly
  • 159
  • 1
  • 5
0
votes
1 answer

How to create virtual users in vsftpd?

I am running vsftpd on my Debian squeeze server. I configured it to chroot local users into their /home/ directory. Now, the problem is that users' web pages are outside of their /home/ directories (this is to allow for non world-readable home…
mrm8
  • 65
  • 2
  • 4
0
votes
2 answers

How to get PHP mysql_ extension for linux chroot jail?

I've setup a chroot jail using jailkit on my Ubuntu 10.04 system. I've copied the binaries for php and mysql which all worked fine. So from the command line of my chrooted user I can run php somefile.php commands which work great. However the…
Emmanuel
  • 347
  • 1
  • 9
  • 20
0
votes
1 answer

How can I setup a one-way scp?

I am trying to setup a remote host to act as a data sink, i.e. some kind of environment on the remote host, A, which allows users to scp data from their local machine to A but not from A to their local machine. One account on the remote host uses…
Thomas F. Hughes
0
votes
1 answer

Multiple chroots in ubuntu for PHP/MySQL hosting

We have a server, Core i7, 24GB RAM we run some of our own applications on. I want to offer some clients PHP/MySQL hosting on that server. Is it feaseable and possible to create a chroot for each client with it's own nginx/php cgi/mysql install? We…
Vasil
  • 495
  • 1
  • 4
  • 7
0
votes
1 answer

File permissions to run mysqld in chroot

I'm trying to run mysqld inside chroot environment. Herez the situation. When I run mysqld as root, I can connect to my databases. But when I run mysql using init.d scripts, mysql gives me an error. $ mysql --user=root --password=password ERROR…
Neo
  • 265
  • 2
  • 6
  • 12