Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [chroot]

A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children.

413 questions
2
votes
1 answer

PHP-FPM Chroot jail corrupts timezone db?

I'm trying to setup a PHP-FPM Chroot jail on a new CentOS 6.3 box. I can get the chroot to work fine, in the sense that I can get php scripts to respond and echo things out. But, every time I use the date function, I get an error saying the timezone…
Vid Luther
  • 770
  • 5
  • 10
2
votes
1 answer

How can I find out the path to a chrooted environment in which a particular daemon was started?

I have a setup with several directories where I can chroot and start the same daemon from. I'd like to be able to tell from which of my multiple directories I started the daemon. I'd like to find it out by using commands only from outside the…
Jacobo de Vera
  • 135
  • 5
2
votes
1 answer

How to run easy_install and pip without root, without virtualenv?

People have access to servers as normal users (jailed actually), and they're advised - at the moment - to download whatever python packages they need, setup.py build them, then add their location to sys.path. Without virutalenv, is there a way to…
Stefano Palazzo
  • 227
  • 1
  • 13
2
votes
3 answers

How to disable PHP's ini_set for specific configuration options?

I'm running a setup with PHP 5.3.8 and use php-fpm with its chroot functionality to separate multiple customers. So each customer has it's own chrooted PHP-environment, which is quite fine. I now want to disallow that a customer can change the…
Dunedan
  • 21
  • 1
  • 2
2
votes
1 answer

Running BIND9 In chroot

I am trying to running bind9, on a ubuntu box, in a chroot jail, as discussed in "Linux System Administration" (Adelstein & Lubanovic). The command "sudo /etc/init.d/bind9 start" is generating errors in syslog: Jun 27 13:39:48 doli named[12418]:…
chernevik
  • 725
  • 3
  • 10
  • 19
2
votes
3 answers

bind9 in a chroot jail - necessary or not?

I always used to keep my bind9 installation in a chroot jail. Now I upgraded my vServer and have to install bind9 over again. Due to the virtualization solution my hosting provider uses, I cannot create devices (/jail/dev/random and /jail/dev/null)…
Danilo Bargen
  • 263
  • 1
  • 3
  • 9
2
votes
1 answer

Debian: ip/network changes within chroot/jail

I've Debian Squeeze running and setup a chroot environment (/jail) with debootstrap. As seen in a tutorial, I mounted the following: proc on /jail/proc type proc (rw) devpts on /jail/dev/pts type devpts (rw) Within the jail, i've running an…
casper
  • 519
  • 2
  • 6
  • 12
2
votes
1 answer

Security implications of mount --bind in a chroot environment

Assume you have a chroot environment where you need a resource - an application or a library - which resides on the host (external to the chroot). Which are the security implications (if any) of performing a mount --bind (from the host to the…
Roberto Aloi
  • 575
  • 2
  • 5
  • 14
2
votes
1 answer

Is there an equivalent of ToLower for a vsftpd.conf?

I am running a vsFTP server using virtual users. I chroot each user to their own personal subdirectory. For ease of use I would like to make my usernames case-insensitive, but I am having some trouble because the server always resolves their…
mclark1129
  • 555
  • 2
  • 11
  • 28
2
votes
2 answers

Security of chroot and linux binaries

I'd like to verify the security of chroot and default programs in a linux distribution (say Ubuntu). Example: I set up jail directory 'A'. Every linux binary from the distribution is placed in 'A' with ACLs being the same. e.g. A/usr/bin contains…
user80203
  • 41
  • 1
  • 2
2
votes
1 answer

Updating (and configuring) chroots on general purpose CentOS webserver with yum?

I'm currently providing web hosting on a shared web hosting VPS environment - that has no chroot. This is obviously a big security concern, although I've made sure that only the owners of files can edit their own stuff. I'm getting to the point of…
David W
  • 3,453
  • 5
  • 36
  • 62
2
votes
2 answers

Pure-FTPD chroot not working on a fresh Debian install?

I am trying to get chroot to work with virtual Pure-FTPD users, but for some reason it simply is not working. I changed the following options: /etc/default/pure-ftpd-common: VIRTUALCHROOT=true /etc/pure-ftpd/conf/ChrootEveryone: yes And added a…
Aron Rotteveel
  • 8,449
  • 17
  • 53
  • 64
2
votes
2 answers

Chroot for Mysql running on Ubuntu 10.10?

Prompted from a question about MySQL server security best practices, I've been running through this list (with a few minor alterations) to properly secure my server database server:…
Calvin Froedge
  • 538
  • 1
  • 6
  • 16
2
votes
2 answers

sendmail not working

I'm trying to use the mail() function in PHP on a Debain Linux server. I have 2 web servers running. One is in a chrooted setup. The server that's not chrooted works fine, the other one wont send email. Any idea how I can setup emailing in the…
Petah
  • 650
  • 2
  • 13
  • 24
2
votes
2 answers

Jail on a http only server

Does it make sense to set up a chroot jail for a apache server which is the only service on the server? Or it is pointless, because the server is in either way lost if it get hacked?
svenwltr
  • 123
  • 5
1 2 3
…
27 28