A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.

learn more… | top users | synonyms

4
votes
1answer
741 views

How do I run Gnome from a systemd-nspawn container in a second X server?

I'm using systemd-nspawn to "boot" a second Linux OS from a USB hard disk. I'd like to launch that OS's Gnome Desktop in a second X server running on the same machine on a different tty than the ...
4
votes
0answers
201 views

Unable to view mounted directories in a chroot [closed]

Here is a quick description of what I have done: I have a chrooted user (username: clientdev) which I have jailed inside their home directory. This chroot directory is /home/clientdev/ which is ...
4
votes
1answer
932 views

How do I run chromium inside a chroot?

Okay, I can run Iceweasel 17 ESR fine and some simple X apps like xkill, so I know that it's not merely an X display problem. However any version of Chromium and Iceweasel 24 fail with the following ...
4
votes
1answer
1k views

suexec with chrooted environment

I'm trying to get a chrooted Apache environment working running mod_fcgid with suexec. Looking at suexec log inside jail, the wrapper scripts are being executed with no problems, however, when I look ...
3
votes
2answers
1k views

Is there a drawback when using a chroot in high performance computing?

My (small) company uses an out-of-date linux (centos) software stack to run a proprietary software on a small cluster. Understandingly, IT is reluctant to upgrade since everything works now. I'd like ...
3
votes
1answer
1k views

SFTP: give user access to folder outside home

I have a machine running Ubuntu 12.04 LTS with OpenSSH server installed. I have created a user with a jailed home account. When I log in with the user's account, I can only access his home (duh). ...
3
votes
1answer
3k views

How to run Firefox in a chroot jail?

I've got this chroot jail all setup. I tried to run Firefox in it, but got this message: "Gtk-WARNING ** cannot open display: " I know I have to invoke Firefox with --display= something. I probably ...
3
votes
1answer
1k views

Chroot debian squeeze for shell access

A user requires shell access to an Ubuntu server from the WAN side. There are many shell accounts with simple passwords. So shell port (port 22) is blocked in the firewall. For my WAN side user I am ...
3
votes
1answer
944 views

Error message: unknown user 'geoclue' in statoverride file

I obtained a strange error message inside a chroot: unknown user 'geoclue' in statoverride file when running apt-get install or apt-get upgrade. I use schroot to enter this chroot. I found that I ...
3
votes
1answer
43 views

How to detect the architecture of the chroot from inside the chroot?

Let's say for example the host system is running Debian amd64. And on that system, another Debian i386 has been installed inside a folder using debootstrap. Then assume a shell script is running ...
3
votes
1answer
325 views

SELinux and chroot system call

TL; DR: This is a question about the final step, in a portable, developer-oriented rooting process, that works across all Android machines. It is not based on any exploit - it is something that we are ...
3
votes
2answers
101 views

debian: unnecessary essential packages in a chroot environment

I have set up debian 8 (jessie) in a chroot environment (on an android phone, but that is not important to this question), and noticed that it is quite large. I have then removed all packages that are ...
3
votes
1answer
717 views

How to build gcc inside a Debian chroot?

I used debootstrap to set up a minimal Debian system (x86): debootstrap wheezy /var/chroot http://ftp.debian.org/debian/ Then I entered the chroot and installed some packages: apt-get install ...
3
votes
1answer
2k views

How to properly use Gentoo Linux as a supplement to an existing distribution?

While I originally wanted to entirely replace the Linux distribution my NAS uses, I meanwhile came to the conclusion that it would be better to leave the existing system as unmodified as possible and ...
3
votes
1answer
31 views

Detemine “which device a file is in” in chroot environment?

According to this: Determine what device a directory is located on I can find which device a file is in by df command in a normal environment: fpemud-workstation / # df /bin Filesystem 1K-...
3
votes
1answer
61 views

Can I use `internal-sftp` when using wrapper script with `ForceCommand` in sshd?

I use /etc/ssh/wrapper.sh script, like in tutorial, that filters which commands are allowed to be run via ssh and logs them. Currently when internal-sftp is required, I use /usr/lib/sftp-server. Is ...
3
votes
1answer
65 views

Why is chroot(2) unavailable to unprivileged users?

Why is chroot(2) unavailable to unprivileged users? I don't understand existing answers on the Internet. For example this one https://lists.freebsd.org/pipermail/freebsd-security/2003-April/000123....
3
votes
1answer
2k views

How to set up chrooted and non-chrooted sftp?

I am trying to set up my Openssh server to allow for chrooted sftp-only users as well as for non-chrooted sftp and ssh users. My condensed (comments and blank lines removed) /etc/ssh/sshd_config looks ...
3
votes
1answer
629 views

chroot into a sshfs folder

I am trying to chroot into a sshfs-mounted directory: mkdir remoteroot sshfs remote:/ remoteroot/ sudo chroot remoteroot/ but I get chroot: cannot change root directory to remoteroot/: Permission ...
3
votes
3answers
4k views

Allow User To Access Other User's Home Directory

I have a Fedora server. I would create an SFTP user account which is allowed to access other user's home dir. Is it possible? For example user1 -> /home/user1 user2 -> /home/user1 user2 can ...
3
votes
2answers
5k views

getting 553 - cannot create file in vsftpd (ubuntu 12.04)

I'm trying to setup a ftp account for a user that has read/write access to one folder: /items/myuser I've set up the account with username 'myuser' in Linux with the adduser command. After that, I've ...
3
votes
2answers
5k views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
3
votes
1answer
421 views

Backing up chroots for host reinstall

I've had my workstation for a couple of years now and its slowly become a complex beast, taking on many roles for my dev and test work. I have done some research and was thinking of setting up some ...
3
votes
1answer
477 views

Are there any differences between mounting a /proc filesystem inside a chroot compared to mounting it from the outside?

Compare the following: mount -t proc none ./my_chroot/proc and: chroot ./mychroot mount -t proc none /proc
3
votes
0answers
31 views

SSH with chroot and only working “sftp”, “rsync” (both)?

I have two users and one shared folder in my Ubuntu server: User writer, which has write access to /var/shared. It's an application regularly making file changes in this folder from remote, with SSH ...
3
votes
0answers
22 views

chroot and hyperos on ArchLinux?

hyperos is a fork of tinycorelinux Can I run hyperos in a chroot? How can I create an ISO image from files on repo? Is this possible? Which steps should I follow?
3
votes
0answers
248 views

Sound output not working properly in chroot

So I have a 64-bit Linux Mint 17 system and I am trying to set up a chroot environment with a 64-bit Ubuntu 12.04-based system (actually something called Vinux, an Ubuntu remix). The problem is that ...
3
votes
1answer
3k views

Chroot gone wrong, can't ssh with user

Distribution: Scientific Linux 6.5 (Carbon), not exactly your typical brand of linux. Tried to chroot a user using these instructions for SSH and quite obviously failed, and now I can't even log in ...
3
votes
2answers
560 views

How can I force chrooted programs to use a virtual ethernet device?

First off, this is not for security reasons, or for use in a production environment. It's because I want to mess around with different configuration management systems on relatively low-spec ...
3
votes
0answers
610 views

Running (X) Xfce4 in Debian chroot

I was trying to start Xfce4 in a chroot. The problem is that Xfce4 starts, shows default the UI but the USB keyboard and mouse are not working. My chroot script: #!/bin/bash mount --bind /dev /srv/...
3
votes
0answers
669 views

remount chrooted read-only subdirectory (non-mountpoint) to read-write from within jail?

I'm trying to do the same of this question (multiple linux installation on same filesystem) but I get this result (root filesystem mounted as read-only) . I'm using debian/sid, have successfully ...
3
votes
0answers
710 views

Slow system after running a KDE GUI application from a Debian Squeeze chroot

I have a PC with Ubuntu 11.04 and a Debian Squeeze chroot installed in it. As soon as I start any KDE application from within chroot (and installed there), e.g. Kompare for viewing git diff output, ...
3
votes
2answers
261 views

Denying “/opt/” access for SFTP Users other than particular dir

This is my first (newbie) post here in unix stackexchange. I want to use my WebServer (Debian) as SFTPServer giving access to particular employees. The dir structure is as follows under root: /...
2
votes
2answers
1k views

How do I `umount` /proc?

I am following this tutorial on how to do a firmware update to my NAND flash. I followed it only changing the directory where I am placing my new root. I am copying all of the /bin /dev /sbin /usr ...
2
votes
5answers
3k views

How to completely hide stuff from a user?

I want to let some of my friends access my computer by making them user accounts. They will mostly access my computer by sftp and ssh, but they could also sometimes access it at my home. However I don'...
2
votes
2answers
107 views

Does it make sense to use SELinux inside a chroot jail?

Does it make sense to use SELinux inside a chroot jail? I am thinking that since in the chroot jail there should only be the bare minimum, not much else could be compromised. Is there still a benefit ...
2
votes
1answer
130 views

Is it possible to log directly into chroot?

Lets say I boot up my computer and I see the login screen. When I log in as myuser, I want to be restricted to a certain root directory via. chroot. Let's assume that the directory is /chroots/myuser/...
2
votes
1answer
2k views

How to achieve the effect of chroot in userspace in Linux (without being root)?

The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
2
votes
2answers
2k views

chroot ssh users to home directory

How can one chroot ssh users to their home directories? This is what i have set in my sshd_config file: ChrootDirectory %h Subsystem sftp /usr/libexec/openssh/sftp-server ssh version is ...
2
votes
1answer
196 views

What folders need to be mounted before chroot?

I am attempting to update a broken Linux Mint 32 bit installation using chroot from a live cd. Different websites give different folders that need to be mounted before chroot. The error I am trying ...
2
votes
1answer
613 views

where does Cron look for the default mail binary?

I have setup Cron Jobs to run inside a Chroot Environment, depending on the User/Group; I have noticed that these cron jobs, running inside the chroot environment, fail to send any mail. Log files ...
2
votes
1answer
290 views

SFTP chroot jail/access based on wildcard

I want to give a list of people SFTP access to /webdocs/ABC* where they will read-write access to only directories that match this wildcard. How do I do this? Can I create a chroot jaill or some ...
2
votes
1answer
11k views

Chroot in to reinstall Grub2 reinstall, mnt/ is empty

I have a common problem: I installed Fedora 18 on my PC that has Windows on it. When I start the PC I don't get asked which system I want to boot, Windows is chosen always. So I found out that I ...
2
votes
1answer
1k views

Sudo does not work in chroot

I would like to be able to use the sudo command in a chroot environment. I start the chroot as follows: chroot /debian-squeeze /bin/bash Now I'm logged in as root in the chroot. I can do su user ...
2
votes
2answers
2k views

OpenSSH, chroot user: Root needs to own the user directory, is there any consequence?

I want to create an account for my friend on my computer, but I don't want my friend to be able to view all my files. I saw that with OpenSSH, there is an option for that. Inside the SSHD ...
2
votes
3answers
3k views

Display X applications on an Android system

Host system: Android 3.2.1 Honeycomb Chroot system: Debian Testing lxde Hardware: Asus eee pad transformer tablet nvidia arm architecture Note 1: The Debian system boots on this hardware, thus it ...
2
votes
2answers
105 views

Using a file other than /etc/resolv.conf to specify a DNS server

Is there a way to specify the address of a DNS server outside of using /etc/resolv.conf? Reason: ( since someone will ask ) I have a system running LDME 1. I have installed a new drive and on it LDME ...
2
votes
2answers
285 views

Chroot user exit jail [duplicate]

I am using OpenSSH chrootdirectory feature to give access to a user via ssh. Can this user exit the jail and return to the normal OS environment? Maybe with su?
2
votes
3answers
6k views

error while loading shared libraries: libc.so.6: cannot open shared object file

I have a Linux kernel and I chroot it on /var/chroot: I added bash dependencies like so: ldd /bin/bash linux-vdso.so.1 => (0x00007fff9a373000) libtinfo.so.5 => /lib/x86_64-...
2
votes
2answers
6k views

Disable operations outside user's home directory with chroot jail?

I'm trying to restrict a user to a specific directory called gclegal using a chroot jail. I've uncommented the line in the /etc/vsftpd.conf file chroot_local_user=YES Created a new user called kg: ...