A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.
1
vote
1answer
19 views
Apache + mod_fcgid + chroot with mod_security. CentOS/RHEL 6
I am trying to setup a web server running Apache + mod_fcgid + mod_security chroot enabled and having a real hard time to get this working. Apache was installed from official CentOS repo and mod_fcgid ...
6
votes
1answer
534 views
chroot fails with --userspec when chroot is i686
I'm experencing a problem with chroot...
I'm running on Arch Linux x86_64.
I have a 64 bit chroot and a 32 bit chroot. They are identical except that one is 32 bit and one is 64 bit.
I can enter ...
11
votes
2answers
4k views
Getting “Not found” message when running a 32-bit binary on a 64-bit system
I have currently a strange problem on debian (wheezy/amd64).
I have created a chroot to install a server (i can't give any more detail about it, sorry). Let's call its path /chr_path/.
To make things ...
0
votes
1answer
371 views
Chroot in to reinstall Grub2 reinstall, mnt/ is empty
I have a common problem: I installed Fedora 18 on my PC that has Windows on it. When I start the PC I don't get asked which system I want to boot, Windows is chosen always.
So I found out that I ...
-4
votes
3answers
56 views
Linux prompt missing brackets
I'm using centos in my VPS server and guest system. There're two logins for a guest system. One is root and one is regular. After I mounted the guest system and chroot to the mounting directory, I ...
6
votes
2answers
6k views
How can I chroot into a filesystem with a different architechture?
I'm trying to chroot into a Arch Linux ARM filesystem from x86_64.
I've seen that it's possible to do using static qemu by copying the binary into the chroot system:
cp /usr/bin/qemu-arm ...
0
votes
1answer
114 views
Implement ProFTPd server without chroot
Can I use ProFTPd without using a chroot jail (thereby preventing access to anything outside of the FTP root)? I have a requirement to have symlinks in my FTP source that point to locations outside of ...
6
votes
4answers
901 views
Lightweight isolated linux environment
I want an isolated (guest) Linux environment on my computer that I can mess up without worrying about the host. E.g. install a lot of stuff from source without package management, pollute environment ...
3
votes
1answer
95 views
Simulate chroot with unshare
I am trying to write a bootstrapper for a minimal, from-source linux distribution.
I would like to build in a chroot-like environment. This should simplify packaging. I do not care about security at ...
2
votes
1answer
42 views
Share a directory over FTP with chroot_local enabled
I'm using vsftpd. By default, when I create a user, they are jailed in their directory which is /home/user.
I have enabled chroot_local_user=YES.
On the other hand, I also wanted to create a shared ...
6
votes
4answers
576 views
Is there a pbuilder-like environment for RedHat?
I would like to know if is there any utility like Debian's pbuilder, to build RPM packages on RedHat using a clean environment (chroot).
I've found mach which has support for something like this but ...
2
votes
1answer
58 views
Cannot open GUI after ssh -X and chroot
I ssh ( with -X option ) to another computer then I I do a chroot.
I then encounter problems running X11 apps.
As one example, after the ssh I would run emacs and it would open a new window as a X11 ...
2
votes
1answer
322 views
Are there any differences between mounting a /proc filesystem inside a chroot compared to mounting it from the outside?
Compare the following:
mount -t proc none ./my_chroot/proc
and:
chroot ./mychroot mount -t proc none /proc
2
votes
1answer
124 views
How to achieve the effect of chroot in userspace in Linux (without being root)?
The goal is to install and run programs in a displaced (relocated) distro (whose / must not coincide with the global /) inside a host Linux system. The programs are not adapted for using a different / ...
17
votes
3answers
5k views
Restricting an SSH/SCP/SFTP user to a directory
Is there a simple way to restrict an SCP/SFTP user to a directory? All methods that I've come across require me to set a chroot jail up by copying binaries, but I don't think that should be necessary.
...
1
vote
1answer
207 views
Set up chroot for LDAP users in RHEL6
I have been working on this for 2 days now and am about to give up so someone please help.
I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...
4
votes
3answers
768 views
Boot Linux system from a subdirectory on a partition?
I would like to try to set up a computer so that it has multiple Linux installs all in the same filesystem. For example, the filesytem would have 3 folders: /Ubuntu_Precise, /Ubuntu_Oneiric, and ...
1
vote
1answer
117 views
Chrooting into ArchLinux iso installation environment
I'm trying to install ArchLinux, but my laptop hangs whenever I have any bootable media attached (other than the primary disk luckily). I tell you this, not because I'm looking to fix my laptop ...
4
votes
3answers
300 views
Restrict ssh login from LDAP to users who have a /home directory
I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
2
votes
0answers
171 views
remount chrooted read-only subdirectory (non-mountpoint) to read-write from within jail?
I'm trying to do the same of this question (multiple linux installation on same filesystem) but I get this result (root filesystem mounted as read-only) .
I'm using debian/sid, have successfully ...
0
votes
0answers
62 views
Creating a Safe Web Server
Web server hosts multiple websites. Multiple users update each website.
User home directory
/home/user1
/home/user2
Web directory
/var/www/site1
/var/www/site2
Each user uses SFTP to upload ...
4
votes
1answer
120 views
How can I mount a directory of the host system for use inside a FreeBSD jail?
I am performing the following on FreeBSD 9.0-STABLE:
mount_nullfs /foo /jail/foo
After that, from within the host system, the mount works. So this works:
touch /foo/bar && ls /jail/foo/bar
...
3
votes
3answers
270 views
Unabled to get rid of BIND 9 chroot
I had installed bind-chroot from yum not long ago, and saw that there were errors in the daily logs from named. Under further investigation, I noticed a directory loop. The named files resided under ...
1
vote
0answers
72 views
Debootstrap and SSHs server
I got a NAS server, a synology. To be able to configure web server better than DSM can do (DSM is synology linux like), I have installed a debian via deboostrap.
My web server works really fine on the ...
2
votes
1answer
469 views
How to unmount a formerly chroot'd filesystem?
I'm using a rescue-live-system (similar to a live-cd) to fix some issues with my Debian server, like that:
# mkdir -p /mnt/rescue
# mount /dev/md2 /mnt/rescue
# mount --bind /dev /mnt/rescue/dev/
# ...
0
votes
1answer
142 views
SSH minimal rights user - su only [duplicate]
Possible Duplicate:
Creating a UNIX account which only executes one command
I am trying to setup a user account that only has as minimal rights as possible.
The user should be able to log ...
2
votes
1answer
93 views
Is it possible to log directly into chroot?
Lets say I boot up my computer and I see the login screen. When I log in as myuser, I want to be restricted to a certain root directory via. chroot.
Let's assume that the directory is ...
1
vote
1answer
250 views
Sudo does not work in chroot
I would like to be able to use the sudo command in a chroot environment.
I start the chroot as follows:
chroot /debian-squeeze /bin/bash
Now I'm logged in as root in the chroot. I can do su user ...
1
vote
1answer
352 views
How to chroot into busybox environment?
i have a filesystem build with buildroot, to compile code for a device using a old kernel and uClibc.
Now i want to chroot into the fs. The problem is, i dont have /bin/bash, just /bin/busybox. How ...
2
votes
2answers
935 views
getting 553 - cannot create file in vsftpd (ubuntu 12.04)
I'm trying to setup a ftp account for a user that has read/write access to one folder: /items/myuser
I've set up the account with username 'myuser' in Linux with the adduser command. After that, I've ...
4
votes
1answer
440 views
How can I access a directory outside a chroot from within it?
I have a user which is chrooted to her home directory, but I want her to also be able to manage files within /var/www. As such, I did the following:
root@server:/home/username# ln -s /var/www www
...
3
votes
1answer
1k views
How to restrict ssh users to browse only /home/%u contents
Can I confine my users to their /home/%u directory using only OpenSSH configuration? From instructions I found on the Internet, I stopped the SSH server and appended the following to the sshd_config ...
2
votes
3answers
325 views
Chroot Risks w/ /dev and /proc
I am planning to set up a few chroot jails for some users to run/test Java applications (lets just assume each application is untrusted). Is there any risk involved with mounting /dev and /proc into ...
4
votes
2answers
301 views
How to rsync a chroot without breaking symlinks?
I'd like to rsync (backup) a chroot environment from outside the chroot.
For that I first make a lvm snapshot of the chroot volume and then run rsync on that.
The only problem with this approach: ...
4
votes
3answers
4k views
What to do to run GUI Java app in chrooted environment?
In my case Java app is JDownloader. I prepared chroot environment as explained here:
http://www.0x61.com/forum/post5240333.html#p5240333
and here:
http://interreality.org/~reed/java-chroot.html
...
0
votes
1answer
255 views
Does OpenSSH_5.9p1 support Chrooted SSH?
Lately i upgraded my SSH server with OpenSSH_5.9p1 and tried to setup chrooted SFTP/SSH. So far i managed to setup chrooted access only for SFTP using new feature of openssh5.9p1:
Match User ...
2
votes
1answer
594 views
SFTP: give user access to folder outside home
I have a machine running Ubuntu 12.04 LTS with OpenSSH server installed. I have created a user with a jailed home account.
When I log in with the user's account, I can only access his home (duh).
...
2
votes
3answers
1k views
Display X applications on an Android system
Host system: Android 3.2.1 Honeycomb
Chroot system: Debian Testing lxde
Hardware: Asus eee pad transformer tablet nvidia arm architecture
Note 1: The Debian system boots on this hardware, thus it ...
2
votes
0answers
96 views
How to find current chroot jail path on Linux <2.6.26
While running kernel 2.6.26 or newer it's possible to get the path of the current chroot jail by comparing the mountinfo of the current process and the init process. Is there a way to get the same ...
2
votes
1answer
782 views
How to run Firefox in a chroot jail?
I've got this chroot jail all setup. I try to run Firefox in it, and get the message:
"Gtk-WARNING ** cannot open display: "
I know I have to invoke Firefox with --display= something. I probably ...
2
votes
3answers
635 views
Is there a linux vfs tool that allows bind a directory in different location (like mount --bind) in user space?
For a user process, I want to mount a directory in other location but in user space without root privilieges. Something like mount --bind /origin /dest, but with a vfs wrapper. Like a usermode ...
2
votes
2answers
721 views
GParted LiveCD: Is there a version with a 64-bit kernel?
I'm trying to chroot with the GParted LiveCD onto an existing 64-bit system, attempting to fix grub.
1
vote
1answer
285 views
MBR is toast or at least Grub is
This started after some kernel trouble that I left alone for a while. I had miscompiled a kernel then tried to re-compile it and started to organize a list of boot options in grub for differently ...
1
vote
1answer
285 views
Building GCC inside a chroot from source
In a previous question I asked about creating a chroot that simulates my embedded device environment. It was suggested that I build from source GCC and binutils first inside my chroot. To attempt this ...
2
votes
1answer
363 views
Preventing ChromeOS from blanking the screen when working on a different tty
I am running Archlinux in a chroot alongside Chrome OS on a chromebook. The original project is there, my fork of it is here (mostly similar).
The issue is that the display power management of Chrome ...
1
vote
1answer
357 views
Start SSH session in some other directory than their home directory and lock them there
I've set up a SSH server which I've let some friends log into, both via SSH and FileZilla. I put a symbolic link to two hard drives in their home directories so that they could access some files. This ...
4
votes
1answer
167 views
Can you Chroot a program from an OpenVZ environment?
I just recently purchased a Virtual Private Server, and it is OpenVZ virtualization.
I am setting up my LAMP stack, and in the past I have always just set up my BIND dns set up in a chrooted ...
1
vote
1answer
694 views
Is it possible to make a chroot -bind with debian under mac os x lion?
Within Linux (e.g. Ubuntu), it is possible to mount partitions like /home, /etc, /lib from another Linux machine and bind them to /proc /sys /tmp to the host's to actually take control of the mounted ...
2
votes
3answers
339 views
Servers running from chrooted Ubuntu on HP TouchPad? [closed]
The problem: servers appear to be broken inside my Ubuntu chroot. No matter what kind of server I try to run, they all seem unresponsive (VLC server won't respond to client, mkRemote doesn't move the ...
2
votes
2answers
922 views
OpenSSH, chroot user: Root needs to own the user directory, is there any consequence?
I want to create an account for my friend on my computer, but I don't want my friend to be able to view all my files. I saw that with OpenSSH, there is an option for that.
Inside the SSHD ...
