A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.

learn more… | top users | synonyms

17
votes
2answers
4k views

What to use to harden Linux box? Apparmor, SELinux, grsecurity, SMACK, chroot?

I am planning to go back to Linux as a Desktop machine. I would like to make it more secure. And try a few hardening techniques, especially since I plan to get my own server. What would be a good, ...
2
votes
1answer
105 views

SFTP chroot jail/access based on wildcard

I want to give a list of people SFTP access to /webdocs/ABC* where they will read-write access to only directories that match this wildcard. How do I do this? Can I create a chroot jaill or some ...
1
vote
1answer
226 views

Implement ProFTPd server without chroot

Can I use ProFTPd without using a chroot jail (thereby preventing access to anything outside of the FTP root)? I have a requirement to have symlinks in my FTP source that point to locations outside of ...
5
votes
1answer
352 views

Why is it possible to leave CHROOT with this sftp config?

I'm trying to create the user lenny, that has read and write permissions in the folder /home/lenny/ and has no shell but only access via SFTP. I'm doing the following: useradd lenny mkdir /home/lenny ...
1
vote
1answer
1k views

Set up chroot for LDAP users in RHEL6

I have been working on this for 2 days now and am about to give up so someone please help. I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...
1
vote
0answers
77 views

How to send a running process to jail?

"Go directly to jail; do not pass go, do not collect $200" — Monopoly Is there any way to make a running process's all future file access behave as if it has always been in a chroot environment?
2
votes
2answers
142 views

How to have a chroot system mount shared with its host?

Say I chrooted into ~/myroot with its /mnt being bind-mounted from the host's /mnt. Now (from within the chroot environment) I want to e.g. mount /dev/something /mnt/something such that not only the ...
1
vote
1answer
915 views

How to assign an additional IP/hostname to a chrooted environment?

While I can simply have e.g. sshd in a chroot environment ("chrootenv") listen to a different port than its parent ("parentenv"), it would be more convenient to have that environment have an ...
0
votes
1answer
159 views

rm -rf on vhosts directory, what should I do?

I was tired and unfortunately I did: rm -rf * /var/www/vhosts repertory on my CentOS 6.3 running with Parallel Plesk. I lost many websites, but worst: I've lost chroot, default, fs and fs-passwd. ...
0
votes
1answer
157 views

Can't create a minimal chroot jail

Was trying to create a minimal chroot jail. The steps followed was: Created a folder chroot Copied bash to the folder chroot Run ldd bash to know the dependencies ldd /bin/bash linux-vdso.so.1 ...
6
votes
2answers
227 views

Which of proc, sys etc. should be bind-mounted (or not) when chrooting into a “replacement” distribution?

This answer to another question basically boils down to chrooting into another Linux distribution in order to mainly use that as a replacement to its too restricted (but irreplaceable) parent. The ...
2
votes
2answers
191 views

How do I `umount` /proc?

I am following this tutorial on how to do a firmware update to my NAND flash. I followed it only changing the directory where I am placing my new root. I am copying all of the /bin /dev /sbin /usr ...
0
votes
2answers
301 views

Cannot create root jail

I just tried to play around with chroot command only for testing purposes, in order to create a temporary root jail, but I didn't managed to. The platform is CentOS 6.4. and I have done it numerous ...
1
vote
1answer
1k views

Unable to get Wireless working during Arch Linux install

I'm following the Arch Linux install guide here: https://wiki.archlinux.org/index.php/Beginners%27_Guide I'm installing from a live disc. I've just used pacstrap to install the base system. I then ...
3
votes
2answers
19k views

vsftpd - Limit FTP access only to /var/www

I am running vsftpd as ftp server on my linux (rasbian), I log in to the machine as a root user. I would like to be still locked to using only /var/www, how can I configure vsftpd conf to accomplish ...
6
votes
1answer
1k views

chroot fails with --userspec when chroot is i686

I'm experiencing a problem with chroot... I'm running on Arch Linux x86_64. I have a 64 bit chroot and a 32 bit chroot. They are identical except that one is 32 bit and one is 64 bit. I can enter ...
2
votes
1answer
38 views

Does `build_packages` download all libraries again in the case of a failed build?

I have been trying to set up and build an image of the Chromium OS from the instructions available here. My laptop was running the build_packages script for about 7-8 hours after which it failed on ...
1
vote
1answer
181 views

32-bit on 64-bit: memory usage for multiple processes

I'm working on a Linux hosting solution for game server software, however the software in question is 32-bit and I'd be running 64-bit on the host. Now, I know I can run 32-bit apps on a 64-bit host ...
2
votes
1answer
334 views

Debian chroot blocking PTTYs on host

I've created a Debian-based chroot environment using debootstrap under Arch Linux, and fill it with life like this: #!/bin/sh mount -t proc proc $CHROOT/proc mount -t devpts devpts $CHROOT/dev/pts ...
1
vote
1answer
474 views

grub-install --no-floppy /dev/sda fails (Funtoo)

I am trying out Funtoo on a new machine. I've been through the installation process, as described in Funtoo Linux Installation . Specifically, the installation is done from within an existing Linux ...
18
votes
2answers
5k views

How do I tell I'm running in a chroot?

I have a unix installation that's supposed to be usable both as a chroot and as a standalone system. If it's running as a chroot, I don't want to run any service (cron, inetd, and so on), because they ...
-4
votes
3answers
130 views

Linux prompt missing brackets

I'm using centos in my VPS server and guest system. There're two logins for a guest system. One is root and one is regular. After I mounted the guest system and chroot to the mounting directory, I ...
9
votes
4answers
2k views

Lightweight isolated linux environment

I want an isolated (guest) Linux environment on my computer that I can mess up without worrying about the host. E.g. install a lot of stuff from source without package management, pollute environment ...
2
votes
1answer
472 views

Share a directory over FTP with chroot_local enabled

I'm using vsftpd. By default, when I create a user, they are jailed in their directory which is /home/user. I have enabled chroot_local_user=YES. On the other hand, I also wanted to create a shared ...
6
votes
4answers
825 views

Is there a pbuilder-like environment for RedHat?

I would like to know if is there any utility like Debian's pbuilder, to build RPM packages on RedHat using a clean environment (chroot). I've found mach which has support for something like this but ...
2
votes
1answer
497 views

Cannot open GUI after ssh -X and chroot

I ssh ( with -X option ) to another computer then I I do a chroot. I then encounter problems running X11 apps. As one example, after the ssh I would run emacs and it would open a new window as a X11 ...
3
votes
1answer
384 views

Are there any differences between mounting a /proc filesystem inside a chroot compared to mounting it from the outside?

Compare the following: mount -t proc none ./my_chroot/proc and: chroot ./mychroot mount -t proc none /proc
2
votes
1answer
769 views

How to achieve the effect of chroot in userspace in Linux (without being root)?

The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
21
votes
3answers
16k views

Restricting an SSH/SCP/SFTP user to a directory

Is there a simple way to restrict an SCP/SFTP user to a directory? All methods that I've come across require me to set a chroot jail up by copying binaries, but I don't think that should be necessary. ...
4
votes
3answers
1k views

Boot Linux system from a subdirectory on a partition?

I would like to try to set up a computer so that it has multiple Linux installs all in the same filesystem. For example, the filesytem would have 3 folders: /Ubuntu_Precise, /Ubuntu_Oneiric, and ...
1
vote
1answer
298 views

Chrooting into ArchLinux iso installation environment

I'm trying to install ArchLinux, but my laptop hangs whenever I have any bootable media attached (other than the primary disk luckily). I tell you this, not because I'm looking to fix my laptop ...
4
votes
3answers
1k views

Restrict ssh login from LDAP to users who have a /home directory

I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
2
votes
0answers
361 views

remount chrooted read-only subdirectory (non-mountpoint) to read-write from within jail?

I'm trying to do the same of this question (multiple linux installation on same filesystem) but I get this result (root filesystem mounted as read-only) . I'm using debian/sid, have successfully ...
0
votes
0answers
136 views

Creating a Safe Web Server

Web server hosts multiple websites. Multiple users update each website. User home directory /home/user1 /home/user2 Web directory /var/www/site1 /var/www/site2 Each user uses SFTP to upload ...
4
votes
1answer
1k views

How can I mount a directory of the host system for use inside a FreeBSD jail?

I am performing the following on FreeBSD 9.0-STABLE: mount_nullfs /foo /jail/foo After that, from within the host system, the mount works. So this works: touch /foo/bar && ls /jail/foo/bar ...
3
votes
3answers
509 views

Unabled to get rid of BIND 9 chroot

I had installed bind-chroot from yum not long ago, and saw that there were errors in the daily logs from named. Under further investigation, I noticed a directory loop. The named files resided under ...
3
votes
1answer
3k views

How to unmount a formerly chroot'd filesystem?

I'm using a rescue-live-system (similar to a live-cd) to fix some issues with my Debian server, like that: # mkdir -p /mnt/rescue # mount /dev/md2 /mnt/rescue # mount --bind /dev /mnt/rescue/dev/ # ...
0
votes
1answer
253 views

SSH minimal rights user - su only [duplicate]

Possible Duplicate: Creating a UNIX account which only executes one command I am trying to setup a user account that only has as minimal rights as possible. The user should be able to log ...
2
votes
1answer
113 views

Is it possible to log directly into chroot?

Lets say I boot up my computer and I see the login screen. When I log in as myuser, I want to be restricted to a certain root directory via. chroot. Let's assume that the directory is ...
2
votes
1answer
596 views

Sudo does not work in chroot

I would like to be able to use the sudo command in a chroot environment. I start the chroot as follows: chroot /debian-squeeze /bin/bash Now I'm logged in as root in the chroot. I can do su user ...
1
vote
1answer
1k views

How to chroot into busybox environment?

i have a filesystem build with buildroot, to compile code for a device using a old kernel and uClibc. Now i want to chroot into the fs. The problem is, i dont have /bin/bash, just /bin/busybox. How ...
3
votes
2answers
3k views

getting 553 - cannot create file in vsftpd (ubuntu 12.04)

I'm trying to setup a ftp account for a user that has read/write access to one folder: /items/myuser I've set up the account with username 'myuser' in Linux with the adduser command. After that, I've ...
2
votes
2answers
688 views

Chroot Risks w/ /dev and /proc

I am planning to set up a few chroot jails for some users to run/test Java applications (lets just assume each application is untrusted). Is there any risk involved with mounting /dev and /proc into ...
4
votes
2answers
542 views

How to rsync a chroot without breaking symlinks?

I'd like to rsync (backup) a chroot environment from outside the chroot. For that I first make a lvm snapshot of the chroot volume and then run rsync on that. The only problem with this approach: ...
4
votes
3answers
6k views

What to do to run GUI Java app in chrooted environment?

In my case Java app is JDownloader. I prepared chroot environment as explained here: http://www.0x61.com/forum/post5240333.html#p5240333 and here: http://interreality.org/~reed/java-chroot.html ...
0
votes
1answer
369 views

Does OpenSSH_5.9p1 support Chrooted SSH?

Lately i upgraded my SSH server with OpenSSH_5.9p1 and tried to setup chrooted SFTP/SSH. So far i managed to setup chrooted access only for SFTP using new feature of openssh5.9p1: Match User ...
2
votes
1answer
790 views

SFTP: give user access to folder outside home

I have a machine running Ubuntu 12.04 LTS with OpenSSH server installed. I have created a user with a jailed home account. When I log in with the user's account, I can only access his home (duh). ...
2
votes
3answers
2k views

Display X applications on an Android system

Host system: Android 3.2.1 Honeycomb Chroot system: Debian Testing lxde Hardware: Asus eee pad transformer tablet nvidia arm architecture Note 1: The Debian system boots on this hardware, thus it ...
2
votes
0answers
120 views

How to find current chroot jail path on Linux <2.6.26

While running kernel 2.6.26 or newer it's possible to get the path of the current chroot jail by comparing the mountinfo of the current process and the init process. Is there a way to get the same ...
2
votes
1answer
2k views

How to run Firefox in a chroot jail?

I've got this chroot jail all setup. I try to run Firefox in it, and get the message: "Gtk-WARNING ** cannot open display: " I know I have to invoke Firefox with --display= something. I probably ...