A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.

learn more… | top users | synonyms

1
vote
1answer
406 views

Chrooting into ArchLinux iso installation environment

I'm trying to install ArchLinux, but my laptop hangs whenever I have any bootable media attached (other than the primary disk luckily). I tell you this, not because I'm looking to fix my laptop ...
4
votes
3answers
2k views

Restrict ssh login from LDAP to users who have a /home directory

I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
2
votes
0answers
553 views

remount chrooted read-only subdirectory (non-mountpoint) to read-write from within jail?

I'm trying to do the same of this question (multiple linux installation on same filesystem) but I get this result (root filesystem mounted as read-only) . I'm using debian/sid, have successfully ...
0
votes
0answers
180 views

Creating a Safe Web Server

Web server hosts multiple websites. Multiple users update each website. User home directory /home/user1 /home/user2 Web directory /var/www/site1 /var/www/site2 Each user uses SFTP to upload ...
4
votes
1answer
3k views

How can I mount a directory of the host system for use inside a FreeBSD jail?

I am performing the following on FreeBSD 9.0-STABLE: mount_nullfs /foo /jail/foo After that, from within the host system, the mount works. So this works: touch /foo/bar && ls /jail/foo/bar ...
4
votes
3answers
744 views

Unabled to get rid of BIND 9 chroot

I had installed bind-chroot from yum not long ago, and saw that there were errors in the daily logs from named. Under further investigation, I noticed a directory loop. The named files resided under ...
0
votes
1answer
331 views

SSH minimal rights user - su only [duplicate]

Possible Duplicate: Creating a UNIX account which only executes one command I am trying to setup a user account that only has as minimal rights as possible. The user should be able to log ...
2
votes
1answer
122 views

Is it possible to log directly into chroot?

Lets say I boot up my computer and I see the login screen. When I log in as myuser, I want to be restricted to a certain root directory via. chroot. Let's assume that the directory is ...
2
votes
1answer
1k views

Sudo does not work in chroot

I would like to be able to use the sudo command in a chroot environment. I start the chroot as follows: chroot /debian-squeeze /bin/bash Now I'm logged in as root in the chroot. I can do su user ...
1
vote
1answer
2k views

How to chroot into busybox environment?

i have a filesystem build with buildroot, to compile code for a device using a old kernel and uClibc. Now i want to chroot into the fs. The problem is, i dont have /bin/bash, just /bin/busybox. How ...
3
votes
2answers
4k views

getting 553 - cannot create file in vsftpd (ubuntu 12.04)

I'm trying to setup a ftp account for a user that has read/write access to one folder: /items/myuser I've set up the account with username 'myuser' in Linux with the adduser command. After that, I've ...
2
votes
2answers
880 views

Chroot Risks w/ /dev and /proc

I am planning to set up a few chroot jails for some users to run/test Java applications (lets just assume each application is untrusted). Is there any risk involved with mounting /dev and /proc into ...
4
votes
2answers
659 views

How to rsync a chroot without breaking symlinks?

I'd like to rsync (backup) a chroot environment from outside the chroot. For that I first make a lvm snapshot of the chroot volume and then run rsync on that. The only problem with this approach: ...
4
votes
3answers
7k views

What to do to run GUI Java app in chrooted environment?

In my case Java app is JDownloader. I prepared chroot environment as explained here: http://www.0x61.com/forum/post5240333.html#p5240333 and here: http://interreality.org/~reed/java-chroot.html ...
0
votes
1answer
434 views

Does OpenSSH_5.9p1 support Chrooted SSH?

Lately i upgraded my SSH server with OpenSSH_5.9p1 and tried to setup chrooted SFTP/SSH. So far i managed to setup chrooted access only for SFTP using new feature of openssh5.9p1: Match User ...
3
votes
1answer
981 views

SFTP: give user access to folder outside home

I have a machine running Ubuntu 12.04 LTS with OpenSSH server installed. I have created a user with a jailed home account. When I log in with the user's account, I can only access his home (duh). ...
2
votes
3answers
3k views

Display X applications on an Android system

Host system: Android 3.2.1 Honeycomb Chroot system: Debian Testing lxde Hardware: Asus eee pad transformer tablet nvidia arm architecture Note 1: The Debian system boots on this hardware, thus it ...
2
votes
0answers
140 views

How to find current chroot jail path on Linux <2.6.26

While running kernel 2.6.26 or newer it's possible to get the path of the current chroot jail by comparing the mountinfo of the current process and the init process. Is there a way to get the same ...
3
votes
3answers
1k views

Is there a linux vfs tool that allows bind a directory in different location (like mount --bind) in user space?

For a user process, I want to mount a directory in other location but in user space without root privilieges. Something like mount --bind /origin /dest, but with a vfs wrapper. Like a usermode ...
2
votes
2answers
1k views

GParted LiveCD: Is there a version with a 64-bit kernel?

I'm trying to chroot with the GParted LiveCD onto an existing 64-bit system, attempting to fix grub.
1
vote
1answer
358 views

MBR is toast or at least Grub is

This started after some kernel trouble that I left alone for a while. I had miscompiled a kernel then tried to re-compile it and started to organize a list of boot options in grub for differently ...
2
votes
1answer
854 views

Building GCC inside a chroot from source

In a previous question I asked about creating a chroot that simulates my embedded device environment. It was suggested that I build from source GCC and binutils first inside my chroot. To attempt this ...
2
votes
1answer
702 views

Preventing ChromeOS from blanking the screen when working on a different tty

I am running Archlinux in a chroot alongside Chrome OS on a chromebook. The original project is there, my fork of it is here (mostly similar). The issue is that the display power management of Chrome ...
1
vote
1answer
828 views

Start SSH session in some other directory than their home directory and lock them there

I've set up a SSH server which I've let some friends log into, both via SSH and FileZilla. I put a symbolic link to two hard drives in their home directories so that they could access some files. This ...
4
votes
1answer
407 views

Can you Chroot a program from an OpenVZ environment?

I just recently purchased a Virtual Private Server, and it is OpenVZ virtualization. I am setting up my LAMP stack, and in the past I have always just set up my BIND dns set up in a chrooted ...
2
votes
1answer
2k views

Is it possible to make a chroot -bind with debian under mac os x lion?

Within Linux (e.g. Ubuntu), it is possible to mount partitions like /home, /etc, /lib from another Linux machine and bind them to /proc /sys /tmp to the host's to actually take control of the mounted ...
2
votes
3answers
521 views

Servers running from chrooted Ubuntu on HP TouchPad? [closed]

The problem: servers appear to be broken inside my Ubuntu chroot. No matter what kind of server I try to run, they all seem unresponsive (VLC server won't respond to client, mkRemote doesn't move the ...
2
votes
2answers
2k views

OpenSSH, chroot user: Root needs to own the user directory, is there any consequence?

I want to create an account for my friend on my computer, but I don't want my friend to be able to view all my files. I saw that with OpenSSH, there is an option for that. Inside the SSHD ...
2
votes
5answers
3k views

How to completely hide stuff from a user?

I want to let some of my friends access my computer by making them user accounts. They will mostly access my computer by sftp and ssh, but they could also sometimes access it at my home. However I ...
4
votes
1answer
1k views

When can one reboot from inside a chroot environment?

Sometimes when I chroot into some folder , I could use reboot to reset my box, but sometimes I can't. So I want to know why I could do that sometimes and why. UPDATE The chroot environment is ...
4
votes
2answers
6k views

Disable direct login for normal users (like oracle) in linux but allow scp and sftp?

Is it possible to disable direct login for normal users (like oracle) in linux but allow scp and sftp for that use?
3
votes
0answers
650 views

Slow system after running a KDE GUI application from a Debian Squeeze chroot

I have a PC with Ubuntu 11.04 and a Debian Squeeze chroot installed in it. As soon as I start any KDE application from within chroot (and installed there), e.g. Kompare for viewing git diff output, ...
-1
votes
1answer
710 views

Allowing access to single folder in centos

I have a java application in /usr/local that keeps writing to a text file on a daily basis. I need a particular user to be able to read this file. What is the best way to do that? I have recently read ...
1
vote
1answer
500 views

Ubuntu 11.10 SFTP chroot jail problem

I am creating a SFTP server with Chroot Jail. The problem is user cannot log into the home directory. I need to keep ChrootDirectory value to one directory above the user's home directory ...
2
votes
2answers
1k views

Mount points in a chroot

I have some device (say /dev/sda1) mounted at /home/user1. I also have a full Linux system under /tmp/chroot, and the directory /tmp/chroot/home contains only one directory named user2. If I chroot ...
4
votes
1answer
650 views

How to disable certain system calls for a given user?

I am creating a web app similar to codepad and for each run-action my app copies a directory (/home/radeks/voidptr/private/chroot-root) to /tmp/voidptr/[random-id]/chroot-root. This chroot directory ...
2
votes
1answer
411 views

Debian unstable chroot security issues

This page describes how you can use the debootstrap utility to install a base Debian unstable/sid system on an existing Linux machine. The new install is accessible using chroot. When doing this, ...
3
votes
1answer
1k views

Chroot debian squeeze for shell access

A user requires shell access to an Ubuntu server from the WAN side. There are many shell accounts with simple passwords. So shell port (port 22) is blocked in the firewall. For my WAN side user I am ...
2
votes
1answer
475 views

How to add another domain to my chrooted named server

Firstly I successfully have a domain working in a chroot named. There are files in /var/named/chroot/var/named called mydomain.com.db and named.local and named.root. Also in /var/named/chroot/etc ...
4
votes
1answer
7k views

Chrooted SFTP with full access to SSH stopped working (Debian)

I've got a home server on Debian 6 for backups. I'd like to setup chrooted SFTP environment with SSH access for some users (only for my knowledge, there are two users now). It almost works or rather ...
6
votes
1answer
4k views

deleting a 'file' under /proc or /dev

I am using a cowdancer/debootstrap setup to generate a chroot. Of course, as I iterate, I generate some chroot configurations that are bad. I have found myself in an awkward situation where I have ...
1
vote
2answers
427 views

Swap root at runtime

I am developing an embedded Linux system. The system is usually installed by creating a ISO file which is written to a USB stick the board can boot from. To make the installation possible to do ...
24
votes
3answers
5k views

chroot “jail” - what is it and how do I use it?

I have heard/read a lot about the chroot jail under linux but have never yet used it (I use Fedora day-to-day), so what is a chroot "jail"? When and why might I use it/not use it and is there anything ...