Questions tagged [chroot-jail]
A chroot jail is the common expression used to describe a section of a file system that is sectioned off for a particular user.
42
questions
1
vote
1
answer
403
views
how to chroot a python app?
I created a simple app in python flask, I would like to put it in a chroot. a very thin jail only containing the bare minimum for this app to run. This is for a school project so I need to use chroot. ...
- 137
0
votes
0
answers
207
views
How to avoid chroot jail affect actual system (e.g. update system time)?
I am new to chroot. I thought chroot is a contained separated system that would avoid things happen inside chroot jail affecting the actual system outside the jail. However I just confirmed that if I ...
- 521
2
votes
1
answer
290
views
Use playerctl in systemd-nspawn container
When I launch a web browser in a systemd-nspawn container, playerctl commands don't work to play and pause multimedia, though they work for browsers outside of the container. Is there an environment ...
- 121
0
votes
0
answers
25
views
running applications with restricted view of root filesystem in linux
I am new to the domain of running Linux application in secure contexts, such as jails.
I am seeking to run a desktop environment, on a Linux system, that has essentially the same capabilities as such ...
- 215
0
votes
1
answer
174
views
Jailkit User Cannot Execute Nextcloud OCC Commands
I have a fresh install of nextcloud 22.2.0, that I installed according to [these instructions:]1
After NC installation, I hae ZERO errors in my NC log. However, in the Overview section I have some ...
- 277
1
vote
3
answers
2k
views
LFS chroot cannot find /usr/bin/env
I am building Linux from Scratch (guide version 10.1). Everything compiled without any errors, but I am now stuck at the step where it requires me to enter the chroot environment (section 7.4). My ...
- 125
2
votes
1
answer
997
views
What is meant by "don't run processes as root in a chroot environmentl"
I read several articles that say one should avoid running processes as root in a chroot environment since it allows the process to escape.
But how should I do that? Chroot can only be evoked by root, ...
- 131
1
vote
1
answer
1k
views
Hide specific folders for a sftp user? Within chroot
when using vsftpd there is an option to hide files or directories that matches a certain pattern in the variable hide_files. Can something similar be achieved when using SFTP/SSH?
Want I want to do is ...
- 13
1
vote
1
answer
4k
views
Could not open authorized keys Permission denied when trying to connect via SFTP
I'm trying to create a chrooted SFTP user using public key authentication, on a Centos 7 server running Plesk Obsidian.
I've set it all up, but when I try to connect via SFTP I get "FATAL ERROR: ...
- 121
1
vote
1
answer
801
views
When to use sftp-server with -d option in conjunction with ChrootDirectory?
The docs for sftp-server state that the -d option is useful in conjunction with the sshd_config ChrootDirectory option. I've also seen some answers on the internet where in order to restrict users to ...
- 165
0
votes
1
answer
1k
views
Is fakechroot a security flaw? [closed]
I recently know more about fakechroot.
AFAIK it seems dangerous since it escalates user privilege, even if it's in chroot. I'm aware of fakeroot but it is not the same since you can't do anything with ...
- 101
0
votes
1
answer
201
views
Does chroot make effect on bootable usb-pendrive?
Let's suppose I put my Linux usb-pendrive inside my PC. I start the system and the I use chroot to apply same changes to the system.
What happen if I reboot the usb-pendrive? Are the changes I made ...
- 1,063
0
votes
1
answer
70
views
Mistakenly added user 'ubuntu' to a chroot group and cant login to server anymore
Ok, So I have an ubuntu server setup with SFTP chroot.
So, any user added to the group 'sftpusers' will be only able to use sftp commands on the server, today while testing rsync, i didnt think and ...
1
vote
1
answer
3k
views
Can't access internet or ping default gateway from a FreeBSD 12 jail
I am new to FreeBSD jails, everything (such as ssh to jail from any host in network) works fine except I can't access internet or ping default gateway from a FreeBSD 12 jail, please help me to resolve ...
- 113
1
vote
0
answers
489
views
RedHat: chroot user to subfolder with a different user chroot'd to the parent folder
I have a RedHat server with SFTP enabled and a few accounts, this server is currently being accessed by an application to read the user's respective files, they do not have Write access. The server is ...
- 11
0
votes
2
answers
989
views
Ubuntu sftp chroot jail path not being read?
I've encountered a problem, that I've been messing around since hours now, not understand what is happening. I have read tons of guides on this, which should be a 2 minute setup task on Ubuntu, and I ...
- 3
0
votes
1
answer
461
views
chroot an user to more than one directory in different locations
I would like to know how I can constraint a user to only be able to access and have RWX permissions to directories like /etc/httpd, /etc/php and /var/www/html as well as its own home directory.
Also ...
- 125
2
votes
0
answers
329
views
Jailkit on a Mac: "ERROR: <jaildir> is not owned by root:root!" / "ERROR: jail directory <jaildir> is not safe"
I'm trying to create a jailed user for limited SSH access on my Mac. I have been, for the most part, following the directions in this Ubuntu StackExchange answer.
However, I'm getting stuck:
# ...
- 485
2
votes
1
answer
358
views
need clarifications on chroot command
I am trying to understand chroot.
I am trying to run just "ls" command in chroot environment.
So i copied "ls" and "bash" and its dependencies(as shown by ldd) to corresponding bin, lib, lib64 ...
- 23
1
vote
1
answer
2k
views
/bin/bash (chrooted) no longer works
Previously all our web customers were setup to access their SFTP using the shell /bin/bash(chrooted). As of 1-17-17 it was working for everyone. The following monday 1-20-17 it was not. This issue is ...
0
votes
1
answer
955
views
How to find whether system uses systemd in chroot?
I was using the following command to check whether system uses systemd
if [[ 1 == pidof systemd ]]; then
But this fails in chroot since proc is not mounted.
sh-4.2# pidof systemd
sh-4.2# ps
Error, ...
- 21
1
vote
2
answers
1k
views
How to Access `/dev` From Inside a `chroot` Jail?
How can one access /dev from within a chroot jail? I'd like to know how to do this on OS X v10.11.5 'El Capitan,' in particular. I've already tried to create an ...
- 143
0
votes
1
answer
163
views
How to enable shortcuts (copy-paste) inside chrooted java app?
I instaled java-based app Lotus Notes inside ubuntu 12 chroot on debian host systems.
I run it with enabled
xhost+
on based system
How to enable Ctrl+C, Ctrl+V shortcuts inside Lotus Notes.
The ...
- 101
1
vote
0
answers
42
views
Does Freenas require each plugin to be under a jail?
I know that Jails are like VMs running under Freenas. And I have Plex and Transmission installed using the Plugin feature on Freenas. Question is: Can I have it that both of these apps installed in ...
- 489
3
votes
1
answer
2k
views
Freebsd 10.2 - multiple interfaces in the jail
My old freebsd 8.0 has the following configuration (in the /etc/rc.conf) for the xx jail:
jail_xx_hostname="xx.example.com"
jail_xx_rootdir="/jails/xx"
#networking setup
jail_xx_ip="sis0|1.2.3.4,re0|...
- 435
0
votes
1
answer
320
views
how can I jail user in a directory in ubuntu?
I have installed vsftpd in ubuntu. I have created a user in name of ftpadmin by command
sudo useradd ftpadmin
and I have set its password too, I also have created a home directory for it using
...
- 1
2
votes
0
answers
132
views
1 chroot sftp user that is able to traverse all other chroot sftp users files/folders
I have a chroot environment that I have setup on CentOS 6. We have users for all of our trading partners and I would like to create an internal user for another department that can sftp in and only ...
- 21
1
vote
2
answers
3k
views
Chroot ssh user to home folder results in Connection refused
I'm trying to give someone ssh access to a (Ubuntu 14.04) server I've got, but I want to limit them to their own home folder. So I'm trying to follow this tutorial.
I first created a user (sudo ...
- 1,424
1
vote
1
answer
1k
views
Wrong ownership when SFTP files
I have successfully setup jailed SFTP access using ChrootDirectory.
Match Group sftponly
ChrootDirectory %h
X11Forwarding no
AllowTCPForwarding no
ForceCommand internal-sftp
I ...
- 163
0
votes
1
answer
166
views
Cannot jail ssh account using ChrootDirectory
I am trying to jail my accounts into their home directory. I tried to do:
Match group accounts
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
ChrootDirectory %h
...
- 163
1
vote
1
answer
2k
views
Using sftp ChrootDirectory while giving other users write access to the same directory
I need to allow an untrusted user SFTP access to a particular directory under his webserver root. I don't want him to access any other parts of the system (including the rest of the web), so I thought ...
- 119
1
vote
1
answer
2k
views
Create shared folder for VSFTP jailed users in Linux
I have a thing I want to do. I have set up a VSFTP server, and put its users in "jail", so they cannot look anywhere else except for their home directory.
However, now I want to do something more. ...
- 435
0
votes
1
answer
1k
views
CentOs vsftpd - Users not being jailed
I have 3 users created and I have installed and configured (or so I thought) VSFTP to jail users to their own home directory but it's not working they can browse right to the route folders. What am I ...
- 125
2
votes
1
answer
632
views
copied chroot jail directory cant be chrooted
I am developing a package so when users login through ssh they are forwarded to a chroot jail.
The jail directory is created via makejail program on building process.
But when the jail package copy ...
- 125
6
votes
2
answers
6k
views
Jail user to home directory while still allowing permission to create and delete files/folders
I'm trying to give a client SFTP access to the root directory of their site on my server (Ubuntu 10.10) so they can manager their website themselves.
While I have been successful in jailing a user to ...
- 161
1
vote
0
answers
214
views
Limiting users/groups to certain ports through SSH, and chroot jail if necessary
I have a private linux box (Ubuntu 10.04) which is running various applications, many of which I access remotely using local forwarding. Now I would like to provide access to a third party, however I ...
- 333
8
votes
3
answers
8k
views
FreeBSD Jails in Mac OS X
I was wondering if FreeBSD Jails are available on Mac OS X or perhaps an equivalent?
vhakti
0
votes
1
answer
451
views
Normal permissions for running mysql
I'm trying to run mysqld inside chroot environment. Herez the situation.
When I run mysqld as root, I can connect to my databases. But when I run mysql using init.d scripts, mysql gives me an error.
...
- 189
1
vote
2
answers
6k
views
Failed to su after making a chroot jail
On a 64 bit CentOS host I am using script make_chroot_jail.sh to put a user in a jail, not permitting it to see anything expect it's home at /home/jail/home/user1.
I did it typing this:
sudo ./...
- 21
3
votes
2
answers
2k
views
chroot for unsecure programs execution
I have never set-up a chroot-jailed environment before and I am afraid I need some help to do it well.
To explain shortly what this is all about: I have a webserver to which users send python scripts ...
- 131
11
votes
1
answer
1k
views
How to "jail" Java applications in OS X?
Is it possible to "jail" Java applications?
My bank has an applet that requests "unrestricted access" to my computer. That makes me feels very uneasy.
There should be a way to tell the java ...
- 215
9
votes
4
answers
2k
views
Is it safer to use a chroot jails, a jail shell or a combination?
A friend of mine has a xandros-based Acer netbook, and has been looking to get some remote administration and help from me while she is travelling around the world.
I've set up an account on her ...
- 656