A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.

learn more… | top users | synonyms

0
votes
0answers
7 views

Command not found: pdebuild fails, fakeroot succeeds

I'm updating a debian package and I need to call an external build dependency which is actually a toolchain. It doesn't have a deb package so I can't provide Build-Depends. I've chosen to include it ...
0
votes
0answers
26 views

CentOS SFTP chroot

I've some issues chrooting an SFTP access for a client. I can access the directory, but the problem is I can't read / write, I can just access the directory. Below is what I've done : # cat /etc/...
0
votes
0answers
28 views

how to restrict users to the assigned folder with SFTP

I know there is different version of this question. What I have is a Red Hat 7.1 Linux box in the cloud. What I need is: create a group exchangefiles restrict group to SFTP I have more than one ...
2
votes
1answer
34 views

How to ''jail'' a java program via chroot? (Fedora 23)

I recently created a MineCraft server in Fedora 23, and faced with problem "What if bad guys want to find really important files in my computer? I have to protect my files!" My jar is in /home/ ...
2
votes
0answers
52 views

Passwordless SSH access not working with rejected message

I setup SSH passwordless access between two Linux hosts. But passwordless access is not working. Authentication is cancelled with a rejected message as shown below su - wsync -bash-4.1$ ssh node-...
1
vote
3answers
52 views

Chroot into a different architecture?

I have a filesystem image that's going to be used for an ARM processor, but I want to install some things on it first, like a Desktop, etc. So I want to mount the filesystem on my Linux machine and ...
0
votes
1answer
11 views

Can I VNC directly into my “Linux Deploy” from OS X?

I use Linux Deploy to run desktop Linux distributions on my Android devices. The way it works is the I start the system in the LD app, and then I go to VNC Viewer on the same device to get a GUI. ...
0
votes
1answer
113 views

crouton - ERROR: unknown command: shell [closed]

I'm using ASUS Chromebook Flip with Google Chrome OS 53.0.2773.3.dev and I'm trying Usage step from Chromium OS Universal Chroot Environment: (Ctrl+Alt+T, type shell and hit enter) I pressed ...
0
votes
1answer
29 views

How to sandbox code in chroot for multiple users?

What am I trying to do? I'm writing a code evaluator using chroot and python and went to hackerrank for some inspiration. What I think is happening at Hackerrank? Hackerrank creates run-...
0
votes
0answers
23 views

Cannot `arch-chroot` to an exising system, “failed to run command '/bin/sh' : No such file or directory”

I run into my system problem with the current Arch Linux, and it turns out to be caused by the F2FS file system (crc32 module not found during boot). I was attempts to fix it, but I've got stuck when ...
3
votes
0answers
48 views

SSH with chroot and only working “sftp”, “rsync” (both)?

I have two users and one shared folder in my Ubuntu server: User writer, which has write access to /var/shared. It's an application regularly making file changes in this folder from remote, with SSH ...
1
vote
0answers
22 views

setting up sftp users only second instances of sshd

I created second instances of sshd called sshd-sftponly and using different port (e.g 2222 ) and made all necessary changes in /etc/rc.d/init.d/sshd-sftponly and /etc/ssh/sshd_config-sftponly ...
3
votes
1answer
35 views

Detemine “which device a file is in” in chroot environment?

According to this: Determine what device a directory is located on I can find which device a file is in by df command in a normal environment: fpemud-workstation / # df /bin Filesystem 1K-...
1
vote
1answer
48 views

create user with only permissions to execute C Programs

I am trying to build online code editor. My scenario : Through the web server a request is received for a 'C' program -the root user creates the file, compiles the file and acks success to the user. ...
1
vote
1answer
18 views

Using chroot to restore Kubuntu 14.04

I have accidentaly purged some system files and now Kubuntu 14.04 won't boot past the start up logo. I read online that I can perform changes on my system through my LiveUSB and the BASH chroot ...
-3
votes
1answer
29 views

How to make user but without access to public_html

How to make an user for linux, who can't access public_html folder? UPDATE: Indeed I want to use http://example.com/~user/ but user doesn't has any permission on other rootdir. How can I do it?
1
vote
0answers
29 views

American Fuzzy Lop run test program as unprivileged user or in chroot

I'm attempting to test tcsh on OS X with American Fuzzy Lop as an exercise, but don't want to accidentally clobber any useful files on my system. Knowing essentially nothing about fuzz testing, I did ...
0
votes
1answer
27 views

How to use systemd-nspawn with pptp?

I would like to set a container use the vpn for only network interface. I have used the pptpsetup and pon make a pptp connection works, and got a ppp0 interface. Now, I want all internet connection ...
1
vote
0answers
26 views

Why does copying /lib into a chroot jail not work? [closed]

I am working on a chroot jail that runs dropbear on an embedded system. I have created the jail, and tested it works. The issue I'm having is with dropbear. (dropbear is running in the chroot (...
2
votes
1answer
75 views

Unable to reach network from chroot

I have a complicated scenario, with most of the complicated parts working: SD card contains a Fedora 23 Raspberry Pi install on a LUKS/BTRFS filesystem. Fedora 23 x86-64 VM being used to manage the ...
1
vote
2answers
92 views

“SSH Virtual Kiosk”. Does “PermitEmptyPasswords yes” work? - How to make ssh user with empty password, so random users can use it?

How to make properly secure ssh account with empty password for running trusted binary? I'd like to make a kind of "virtual ssh Kiosk" for random users, while limiting "demo app" behind ssh "pseudo-...
3
votes
1answer
80 views

Can I use `internal-sftp` when using wrapper script with `ForceCommand` in sshd?

I use /etc/ssh/wrapper.sh script, like in tutorial, that filters which commands are allowed to be run via ssh and logs them. Currently when internal-sftp is required, I use /usr/lib/sftp-server. Is ...
2
votes
1answer
80 views

Why does uname -m report differently in chroot and schroot environment?

I am running Ubuntu 14.04.2, 64 bit host system. Using debootstrap, I installed a minimal Ubuntu 14.04.2, 32 bit system in trusty32 directory. This is what my schroot configuration look like: [...
0
votes
0answers
49 views

KVM on Crouton chroot?

I've enabled Vt-x support in BIOS, and have been trying to get KVM on my chroot for a few days now. I lost my chroot last night (got it into an unbootable state) trying and had to build a new one. ...
0
votes
1answer
95 views

Xming for Linux? (Aka run a display/x11 server inside a window)

With Xming I can run an X11 server inside a window and then run mate-session to get a very fast remote desktop inside a window. On Linux, I'm not entirely sure how to X11 forward mate-session to just ...
0
votes
1answer
37 views

Unable to mount SD card at crouton startup

I am just starting out running Ubuntu trusty through crouton on my chromebook, and I am attempting at mounting my sd card at startup. I currently have a shell script which mounts the sd card when it ...
0
votes
0answers
30 views

How to configure vsftpd to use /opt/etc/passwd to authenticate

I have FTP setup on Solaris 8 and I am trying to migrate it to RHEL7. Present Architecture on Solaris FTP daemon is chrooted under /opt. When users try to login to FTP, they are authenticated with /...
0
votes
0answers
22 views

chroot into a Linux with X window system installed, from a Linux without X window system, and then run xinit, there is no mouse and keyboard working

I have two systems on my machine. One is Ubuntu and the other one is Linux from scratch (LFS) which I built it my self. Ubuntu has X window system installed but LFS has no windowing system whatsoever....
3
votes
1answer
68 views

Why is chroot(2) unavailable to unprivileged users?

Why is chroot(2) unavailable to unprivileged users? I don't understand existing answers on the Internet. For example this one https://lists.freebsd.org/pipermail/freebsd-security/2003-April/000123....
0
votes
1answer
122 views

avahi-daemon fails to start with “Failed to chroot(): Permission denied”. But only without stderr-IO-redirection

After a recent upgrate, avahi-daemon is not starting up anymore. Furthermore, the behaviour differes weather if I redirect stderr to a file or not. If I start avahi-daemon --debug with debugging ...
0
votes
0answers
28 views

Installing specific version of python and its dependencies in chroot enviroment

I'm trying to install python from source on chroot environment in CentOS 7.1, If I'm using ./configure --prefix=/chroot but I need to find the dependencies and copy them to chroot directory also, How ...
0
votes
1answer
26 views

Assigning output to variable in automated chroot script

For the life of me, I cannot figure out how to chroot through a script, and assign a value to a variable. Okay, so I learned how to chroot and execute commands from a script without halting the flow ...
1
vote
0answers
70 views

Python installation fails in chroot

I tried to install Miniconda Python in a chroot: chroot $1 wget -q https://repo.continuum.io/miniconda/Miniconda3-3.19.0-Linux-x86_64.sh -O /tmp/miniconda.sh ...
0
votes
0answers
19 views

SFTP doesn't allow browsing for users (only root allowed) [duplicate]

I am trying to create the user which will have restrictions to get out of his home directory. Everything works fine with the "root" user, but other users have the problem. They're in "sftpusers" group ...
2
votes
1answer
35 views

Running maintenance commands in pbuilder chroot using cron

We run an automated build system using pbuilder-dist. We use it to build our open source project Snap Websites to produce nightly builds. Currently we are building against Ubuntu "trusty." The issue ...
1
vote
1answer
137 views

sbuild schroot fails

I am trying to package an Ubuntu package as a Debian package. For maintainability I am trying to use sbuild. Following the steps here I go through the first five steps, but when I try to build I get ...
0
votes
0answers
129 views

Directory does not exist inside the chroot

I'm trying to setup an ubuntu scope project using the setup wizard from the ubuntu sdk ide. The last step in this wizard is to run cmake, but I get the following error: E: Failed to change to ...
0
votes
0answers
96 views

file permissions is getting differed with the umask value while using sftp

I have set up the jail rooted sftp environment on port 222 with umask 0002. I have created the jail rooted user whose home directory is on nfs mount point. When I have tried to upload the files , I ...
1
vote
0answers
43 views

How to 'snapshot' a chroot?

I want to perform something similar to a 'clone' on vmware fusion/virtualbox/a VM manager. Host and chroot are both ubuntu. One complicating factor may be that this chroot may have one or more child ...
0
votes
0answers
13 views

Change permissions of /opt folder [duplicate]

Maybe this is dumb from the security point of view. But I would like to change permissions of /opt folder to 775 (or 777). Enabling the user to modify its content. Is this ok or does that pose a ...
3
votes
1answer
48 views

How to detect the architecture of the chroot from inside the chroot?

Let's say for example the host system is running Debian amd64. And on that system, another Debian i386 has been installed inside a folder using debootstrap. Then assume a shell script is running ...
0
votes
1answer
39 views

How to run command after entering postgres

I am trying to execute ls after opening a new Guake tab and logging into postgres. guake -n guake -e 'sudo -i -u postgres && ls' The command successful opens a new tab then prompts me for ...
1
vote
0answers
36 views

Build errors on a copied operating system in a chroot

I'm in a bit of an interesting situation. In an attempt to have root access on my school's physics network computers, I ended up creating a chroot environment, using fakeroot and fakechroot. As every ...
1
vote
1answer
391 views

debian jessie volume group not found and cant boot

I have accidentally deleted my boot partition. OS is Debian Jessie with LUKS LVM. I have created a new partition and successfully reinstalled grub with chroot method. Now when I try to boot, my root ...
0
votes
1answer
57 views

How to protect from chrooting to its linux partition and how to chroot it after using the protection?

I am currently using archlinux, It is possible to boot on an archlinux installation iso for instance, to mount my current archlinux partition and my boot partition and then to use arch-chroot. Then I ...
0
votes
0answers
209 views

bash errors getcwd: cannot access parent directories

I cross-compiled GNU bash v4.3 but am now getting errors related to: shell-init: error retrieving current directory: getcwd: cannot access parent directories: Function not implemented and chdir: ...
1
vote
1answer
116 views

How can I use debian_chroot in bashrc to identify the chroot env?

I see the following in ~/.bashrc : if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then debian_chroot=$(cat /etc/debian_chroot) fi which means if the variable is ...
1
vote
1answer
64 views

How can I boot into a chroot, without leaving the current OS session?

I'm building Linux systems, turn them into ISOs and then test them in a VM. But that step takes minutes, which I would like to avoid, while developing. Is there a way I can take the files, which are ...
1
vote
0answers
70 views

Trigger a GTK application from CHROOT during LightDM startup

I am trying run a GTK application with chrooted environment. Mentioned are the lightdm settings which I have set. System configuration: OS : Debian 8 chroot FS: Debian 6 Windows manager : LXDE ...
0
votes
2answers
80 views

how to mount -t proc proc proc/ with their absolute path for a chroot?

as we know chroot needs some fs to be mounted inside chroot directory like the following : chroot_dir=/some/where cd $chroot_dir/ mount -t proc proc proc/ mount --rbind /sys sys/ mount --rbind /...