A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.

learn more… | top users | synonyms

2
votes
1answer
58 views

Is there a way to isolate a running program from the rest of a Linux system?

First of all, I know about virtualisation and containers. I'm sure "he wants containers" is what popped in your mind. (Don't deny it!) However containers are like chroot: if you want to execute bash ...
1
vote
0answers
180 views

unix chroot jail shell (with or without sudo?)

at the moment I am creating a chroot jail. Therefore I read some articles and everything seems to be clear, exept for one thing: the chroot jail shell In one source they created the following setup ...
3
votes
1answer
221 views

SELinux and chroot system call

TL; DR: This is a question about the final step, in a portable, developer-oriented rooting process, that works across all Android machines. It is not based on any exploit - it is something that we are ...
0
votes
0answers
24 views

How to give chroot ssh access user access to /var/www/html [duplicate]

I followed this guide to set up chroot access for a vendor to our web server: http://geek.co.il/2010/03/14/how-to-build-a-chroot-jail-environment-for-centos It works and I have a chroot jail set up, ...
0
votes
0answers
21 views

Creating Ubuntu Gutsy chroot on Mint 17.1 fails to download Packages.bz2

I am trying to create a chroot to Ubuntu 7.10 on host running Linux Mint 17.1 64-bit. For that, I first created an entry in /etc/chroot/chroot.conf [gutsy] description=Ubuntu Gutsy location=/genera ...
3
votes
0answers
22 views

chroot and hyperos on ArchLinux?

hyperos is a fork of tinycorelinux Can I run hyperos in a chroot? How can I create an ISO image from files on repo? Is this possible? Which steps should I follow?
1
vote
0answers
37 views

SFTP chrooted to home directory and users wanted to have a write permission to home directory [duplicate]

I have a new request from the user and these are the following requirements Request to have an sftp user account and disable shell access Sftp User should only see their home directory (ie.. ...
5
votes
1answer
99 views

PID in arch-chroot is incorrect

I am trying to run a python script in a chroot (specifically, the chroot is created with arch-chroot). The python script relies on os.getpid(), but this seems to be returning an incorrect PID within ...
1
vote
1answer
138 views

pid file error when starting stunnel

I'm trying to start stunnel at my mac os as client. But I'm not able to get it running as I have noticed this reported problem at the stunnel's log file: 2015.10.10 16:10:24 LOG5[ui]: stunnel 5.23 on ...
11
votes
3answers
11k views

How to unmount a formerly chroot'd filesystem?

I'm using a rescue-live-system (similar to a live-cd) to fix some issues with my Debian server, like that: # mkdir -p /mnt/rescue # mount /dev/md2 /mnt/rescue # mount --bind /dev /mnt/rescue/dev/ # ...
1
vote
2answers
51 views

How to create 32bit chroot system that is just a mirror of my current system for compiling purposes?

After lot of googling and posting and crying over obscure GCC linker error messages I concluded that the only way to reliably build something in foreign CPU architecture is to set up a chroot ...
3
votes
2answers
83 views

debian: unnecessary essential packages in a chroot environment

I have set up debian 8 (jessie) in a chroot environment (on an android phone, but that is not important to this question), and noticed that it is quite large. I have then removed all packages that are ...
1
vote
1answer
103 views

Arch - How do Install a package made in a clean chroot?

I've been trying to build and install GNU Icecat from source on Arch linux using yaourt, but I've recieved errors during the build relating to the Infinality font set. I came across this page from ...
1
vote
1answer
30 views

enable a user to chroot?

I have a script that I am running as a regular user (but one that can sudo). This script relates to BIND and gathers information each time it runs. It has not been working correctly and I noticed ...
1
vote
0answers
35 views

How does a chroot system interact with the kernel

I am trying to debug an OpenGL issue in a piece of closed source software. The software supposedly works in Debian Wheezy and I would like to get it working in Arch. I tried running it in a Debian ...
2
votes
0answers
113 views

Restrict SFTP users to different directories

How can I restrict some users/groups to some directories? I mean different users, different directories. What I have: Ubuntu 14. Experience with Ubuntu: Just started. What I have tried: I read ...
0
votes
1answer
33 views

Why am I getting kicked out of my chroot?

I enter a chroot, source a script to initialize my git user (source init_my_chroot) and then seem to be too sensitive to getting kicked out of my chroot. install: cannot create regular file ...
1
vote
1answer
27 views

how to avoid direct/network root login on the system and using some chroot to admin the system?

here the idea for which I seek a solution: I want to have a system with no way to log as root. I want to manage the system (edit /etc/files, (un)install something, etc.) by physically unplug the ...
1
vote
2answers
25 views

Pureftpd as user,is possible?

I want to run pure-ftpd in chroot as user,not as root,i've set server to non privileged port 5050,but i don't know how to run as user instead of root,someone know the option?
2
votes
2answers
95 views

Does it make sense to use SELinux inside a chroot jail?

Does it make sense to use SELinux inside a chroot jail? I am thinking that since in the chroot jail there should only be the bare minimum, not much else could be compromised. Is there still a benefit ...
0
votes
1answer
243 views

Can't find job mysql on crouton, ubuntu precise

I'm using Ubuntu precise as chroot in my chromebook machine. I'm trying to install mysql through apt-get install mysql-server. The thing is, when I try to start it, it can't find the job: ...
0
votes
1answer
76 views

Chroot - copy or mount --bind

In every tutorial I found online about chrooting, there is part involving copying stuff into the chroot, executables, libraries and others. Why is that? Why not just mount --bind the stuff in? ...
0
votes
1answer
97 views

Pass environment variables to clean chroot in Arch

I am writing a PKGBUILD for Arch Linux. The package is large and compressing/uncompromising it take considerable time for limited space savings and I would like to turn it off while I am writing the ...
1
vote
1answer
203 views

How to create a tar of a chroot?

I want to capture everything in a chroot but am unsure whether I need to first chroot into it to see the full filesystem/preserver permissions etc. From outside the chroot, it seems like I would miss ...
2
votes
0answers
104 views

running cron on a chroot

For my web development I use a debootstrap'ped Debian with sysvinit, I start apache2/mysql manually only when I need to work. Now for a new project I require to run some scheduled task for which I ...
0
votes
1answer
32 views

What happens if I mount multiple devices at the same path in chroots?

I'm trying to understand what happens if multiple change roots mount to my host's /proc directory. sudo chroot mychroot1 mount -t proc proc /proc sudo chroot mychroot2 mount -t proc proc /proc ...
1
vote
1answer
42 views

Is it possible to chroot sftp service as unprivileged user?

I currently have an sftp-only sshd service running as an unprivileged user that works fine. When adding ChrootDirectory %h to the separate user_sshd_config, the user is immediately disconnected after ...
0
votes
2answers
41 views

How to pass an environment variable when change rooting?

I don't seem to be able to pass an environment variable to a chroot: $ sudo apt-get install debootstrap dchroot $ sudo debootstrap trusty mychroot $ sudo chroot mychroot /bin/bash -c "MY_VAR=5; echo ...
2
votes
2answers
94 views

Using a file other than /etc/resolv.conf to specify a DNS server

Is there a way to specify the address of a DNS server outside of using /etc/resolv.conf? Reason: ( since someone will ask ) I have a system running LDME 1. I have installed a new drive and on it LDME ...
2
votes
2answers
148 views

chpasswd apply changes in the chroot directory [duplicate]

I have debootstraped version of wheezy on my Archlinux machine and would like to change it's root password: echo "root:toor" | chpasswd --root /home/containers/wheezy/ However I get an error: ...
2
votes
1answer
138 views

chpasswd apply changes in the chroot directory

I have debootstraped version of wheezy on my Archlinux machine and would like to change it's root password: echo "root:toor" | chpasswd --root /home/containers/wheezy/ However I get an error: ...
1
vote
1answer
104 views

Running ssh from chroot jail in SuSE

I'm trying to make a server that acts as sort of an access point for lots of other machines. I want to give one user jailed access to it so they can ssh to other machines in the network. I've got ...
2
votes
1answer
162 views

Set up enviroment for cross-compilation to i386, armel, armhf, arm64 and mips with no libglib2 conflicts

I'm trying to set up a build environment for a software in Debian Jessie. I need to produce amd64, i386 and eventually armel and armhf binaries of the software. It would be cool if I could ...
1
vote
0answers
11 views

Chroot Users to /opt and subdirectories [duplicate]

I'll make this short and hopefully I make sense. Im trying to give a user ssh access, but, he/she must only be able to access /opt and the few subdirectories that live under it. However, here's ...
1
vote
2answers
5k views

Disable operations outside user's home directory with chroot jail?

I'm trying to restrict a user to a specific directory called gclegal using a chroot jail. I've uncommented the line in the /etc/vsftpd.conf file chroot_local_user=YES Created a new user called kg: ...
42
votes
2answers
27k views

Getting “Not found” message when running a 32-bit binary on a 64-bit system

I have currently a strange problem on debian (wheezy/amd64). I have created a chroot to install a server (i can't give any more detail about it, sorry). Let's call its path /chr_path/. To make things ...
3
votes
0answers
210 views

Sound output not working properly in chroot

So I have a 64-bit Linux Mint 17 system and I am trying to set up a chroot environment with a 64-bit Ubuntu 12.04-based system (actually something called Vinux, an Ubuntu remix). The problem is that ...
2
votes
1answer
157 views

get back to initramfs on shutdown

I have got my own initramfs running its own init script. After doing some things, it finally calls switch_root and executes the init script of the system, which is mounted in /mnt. Now I want to get ...
1
vote
2answers
257 views

How to use bindfs to create a shared folder between a chroot environment and its host

As the title says. I want to use bindfs (or any viable alternative) to solve the following problem: I have a local folder that contains a maven project I am working on. However I can only build in a ...
23
votes
4answers
143k views

Limit FTP access only to the /var/www with vsftpd

I am running vsftpd as ftp server on my linux (rasbian), I log in to the machine as a root user. I would like to be still locked to using only /var/www, how can I configure vsftpd conf to accomplish ...
3
votes
1answer
3k views

How to run Firefox in a chroot jail?

I've got this chroot jail all setup. I tried to run Firefox in it, but got this message: "Gtk-WARNING ** cannot open display: " I know I have to invoke Firefox with --display= something. I probably ...
1
vote
1answer
594 views

Docker in Crouton - VFS consuming astronomical amounts of space

I'm attempting to help out a roommate who has installed Kubuntu on his Chromebook using Crouton (it's basically just a fancy chroot run within ChromeOS). I helped him get the Docker daemon running, ...
0
votes
0answers
44 views

Running a DE in chroot?

I'm looking to run a desktop environment inside of chroot using Xnest. So far I've gotten Xfce to work but everything else not so much. Both cinnamon and gnome fail to run. Cinnamon gives me this ...
1
vote
2answers
73 views

How to input Chinese (JCK) in console without X running

Is it possible at all to input JCK languages (Traditional Chinese in my case) in the console without having X-windows running? All the help I have found online for Chinese input assume that X and ...
2
votes
2answers
91 views

Trying to transplant bash to /mnt for chroot, what does bash want in order to work?

I have a stage 3 gentoo tarball.. extracted it to /mnt which is hosting /dev/sda3. Though there was no bin and no sign of bash after unpacking. Far as I'm aware, the rest of the configuration involves ...
2
votes
2answers
1k views

chroot ssh users to home directory

How can one chroot ssh users to their home directories? This is what i have set in my sshd_config file: ChrootDirectory %h Subsystem sftp /usr/libexec/openssh/sftp-server ssh version is ...
7
votes
3answers
2k views

How do Linux permissions work when a process is running as a specific group?

This is something I haven't been able to find much info on so any help would be appreciated. My understanding is thus. Take the following file: -rw-r----- 1 root adm 69524 May 21 17:31 ...
2
votes
1answer
128 views

upgrade chroot version on centOS 5?

How do I upgrade chroot release on my centos 5 server? I want to install a service that uses a new capability available in later versions (--userspec) of chroot and I can't find any documentation of ...
0
votes
1answer
63 views

Disk ID in chroot / jail

When I print out all information about a disk /dev/sda on my host system, then I get this sort of information (I got this information with command udevadm info --query=all --name=/dev/sda): P: ...
9
votes
3answers
2k views

Providing /bin and /lib inside a chroot jail

I need to be able to provide the /bin and /lib directories inside a chroot jail so that programs can dynamically link properly. Is there a way to accomplish this without making a copy of the /bin and ...