A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.

learn more… | top users | synonyms

4
votes
1answer
28 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
1
vote
1answer
37 views

CHROOT: Unable to copy files to jailed users directory from local machine using WINSCP

I have setup a Chroot environment for one of my users called client on my system. I am using WINSCP to connect to my server from my machine using public key authentication. Everything works fine, I ...
4
votes
0answers
58 views

CHROOT : Unable to view mounted directories

I posted a question on stack overflow, but I was told that my question was more relevant to this section so I thought I'd repost it here. Here is a quick description of what I have done: I have a ...
1
vote
1answer
56 views

How can I chroot into a live filesystem.squashfs Linux distribution?

I would like to chroot into a Live USB Linux distro, if such thing is possible. I don't know if there is a generic method, so I will detail my specific test. I am testing Kali Linux v1.0.5 Live USB ...
6
votes
3answers
359 views

Why are web servers traditionally started as superuser?

Thinking about a future web server setup, it struck me that for some reason web servers usually start as root and then drop certain rights (setuid) for the worker processes. In addition there is often ...
0
votes
1answer
3k views

Chroot in to reinstall Grub2 reinstall, mnt/ is empty

I have a common problem: I installed Fedora 18 on my PC that has Windows on it. When I start the PC I don't get asked which system I want to boot, Windows is chosen always. So I found out that I ...
1
vote
1answer
497 views

Apache + mod_fcgid + chroot with mod_security. CentOS/RHEL 6

I am trying to setup a web server running Apache + mod_fcgid + mod_security chroot enabled and having a real hard time to get this working. Apache was installed from official CentOS repo and mod_fcgid ...
1
vote
1answer
39 views

Create ssh user which can only access home directory [duplicate]

I read documentation on the internet on how to create a new user with SSH access. I figured it out and to create a user is quite simple. The next step I want to take is to jail this ssh server to the ...
3
votes
2answers
71 views

Denying “/opt/” access for SFTP Users other than particular dir

This is my first (newbie) post here in unix stackexchange. I want to use my WebServer (Debian) as SFTPServer giving access to particular employees. The dir structure is as follows under root: ...
2
votes
1answer
309 views

suexec with chrooted environment

I'm trying to get a chrooted Apache environment working running mod_fcgid with suexec. Looking at suexec log inside jail, the wrapper scripts are being executed with no problems, however, when I look ...
0
votes
3answers
225 views

TERM variable in chroot

I've created a chroot with the help of jailkit and now I'm trying to install some other libraries and tools. First I tried to install clear library. I've copied the file from the /bin folder and ...
3
votes
1answer
289 views

Simulate chroot with unshare

I am trying to write a bootstrapper for a minimal, from-source linux distribution. I would like to build in a chroot-like environment. This should simplify packaging. I do not care about security at ...
2
votes
2answers
283 views

Chroot SFTP users who require access to multiple directories under same parent folder

I have a RHEL 6 server with a /Documents directory, and it has child directories 1 2 3 4 5.... right under the /Documents directory. Is it possible to create an SFTP chroot jail that only gives a ...
1
vote
1answer
193 views

How do I run chromium inside a chroot?

Okay, I can run Iceweasel 17 ESR fine and some simple X apps like xkill, so I know that it's not merely an X display problem. However any version of Chromium and Iceweasel 24 fail with the following ...
8
votes
3answers
9k views

How can I chroot into a filesystem with a different architechture?

I'm trying to chroot into a Arch Linux ARM filesystem from x86_64. I've seen that it's possible to do using static qemu by copying the binary into the chroot system: $ cp /usr/bin/qemu-arm ...
2
votes
1answer
32 views

Unable to connect after ChrootDirectory within sshd_config

After adding the following to my sshd_config file... Match user myuser ChrootDirectory /var/www/html X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp I am unable to ...
0
votes
1answer
62 views

Run Java in a chrooted jail

I'm on a CentOS 6.5 machine with Plesk Panel which I used to create a chrooted environment for a user who can access it via ssh. I'm not a big expert but somehow I managed to let him use some basic ...
1
vote
1answer
51 views

Correlation between CHROOT and Crouton - -

I am trying to understand what purpose/function of CHROOT and how using it with Crouton will allow you to use certain Linux distros and libs. Does CHROOT essentially create some kind of a ...
1
vote
2answers
27 views

Automated test for install script

I'm writing an install script for an appliance that modifies system config files under /etc (amongst other things). How can I test this script non-destructively? Ideally I would like to run the ...
2
votes
1answer
257 views

How to properly use Gentoo Linux as a supplement to an existing distribution?

While I originally wanted to entirely replace the Linux distribution my NAS uses, I meanwhile came to the conclusion that it would be better to leave the existing system as unmodified as possible and ...
2
votes
1answer
65 views

How to copy a debootstrap (chroot) directory to another computer?

I created an installation of Debian in a subdirectory using debootstrap on computer A. Now I would like to transfer this installation to computer B which has a local connection but no global internet ...
1
vote
3answers
103 views

Allow User To Access Other User's Home Directory

I have a Fedora server. I would create an SFTP user account which is allowed to access other user's home dir. Is it possible? For example user1 -> /home/user1 user2 -> /home/user1 user2 can ...
7
votes
1answer
2k views

How can I access a directory outside a chroot from within it?

I have a user which is chrooted to her home directory, but I want her to also be able to manage files within /var/www. As such, I did the following: root@server:/home/username# ln -s /var/www www ...
1
vote
3answers
114 views

HowTo Chroot to BSD

I recently tried FreeBSD [9.2]. I installed it but as i found out it doesn't install any bootloader by default. So now i want to find out HOW it is possible to chroot to the installed BSD via a ...
2
votes
2answers
142 views

Pivot root between two Linux installations

I have two Linux distributions installed (Debian and Ubuntu). Each with its own usr, swap, and whatever. Both are completely independent, each in its partition. According to the man pages, I could ...
7
votes
1answer
141 views

Boot into a chroot?

I have Linux (Debian Jessie) installed on a hard drive. Drive - sda1, ext4fs, and sda2 - swap I have a /chroot folder. There is installed another system, in /chroot folder. Question: How to tell ...
0
votes
1answer
41 views

Sandbox alike solution for linux

I wonder if there is a kind of a sandboxing solution for linux, sometimes there is more than one app that is candidate to solve my problems, in that case I want to try all of them to get the one which ...
1
vote
1answer
69 views

vsftpd does not allow chrooted users write to directory

I installed vsftpd on ubuntu 12.04 and chrooted local users, in order not to let them see the other parts of system. but when a local user wants to login into ftp it gives out this error: 500 OOPS: ...
16
votes
2answers
3k views

What to use to harden Linux box? Apparmor, SELinux, grsecurity, SMACK, chroot?

I am planning to go back to Linux as a Desktop machine. I would like to make it more secure. And try a few hardening techniques, especially since I plan to get my own server. What would be a good, ...
2
votes
1answer
69 views

SFTP chroot jail/access based on wildcard

I want to give a list of people SFTP access to /webdocs/ABC* where they will read-write access to only directories that match this wildcard. How do I do this? Can I create a chroot jaill or some ...
1
vote
1answer
200 views

Implement ProFTPd server without chroot

Can I use ProFTPd without using a chroot jail (thereby preventing access to anything outside of the FTP root)? I have a requirement to have symlinks in my FTP source that point to locations outside of ...
4
votes
1answer
16k views

How to create a FTP user with specific /dir/ access only on a Centos / linux installation

So I'm on a VPS - CentOS Linux installation. I have vsFTPd on the server. I currently have SFTP access to the server via my root user, but am now trying to create a new user with FTP access to a ...
5
votes
1answer
330 views

Why is it possible to leave CHROOT with this sftp config?

I'm trying to create the user lenny, that has read and write permissions in the folder /home/lenny/ and has no shell but only access via SFTP. I'm doing the following: useradd lenny mkdir /home/lenny ...
1
vote
1answer
834 views

Set up chroot for LDAP users in RHEL6

I have been working on this for 2 days now and am about to give up so someone please help. I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...
1
vote
0answers
55 views

How to send a running process to jail?

"Go directly to jail; do not pass go, do not collect $200" — Monopoly Is there any way to make a running process's all future file access behave as if it has always been in a chroot environment?
2
votes
2answers
97 views

How to have a chroot system mount shared with its host?

Say I chrooted into ~/myroot with its /mnt being bind-mounted from the host's /mnt. Now (from within the chroot environment) I want to e.g. mount /dev/something /mnt/something such that not only the ...
1
vote
1answer
433 views

How to assign an additional IP/hostname to a chrooted environment?

While I can simply have e.g. sshd in a chroot environment ("chrootenv") listen to a different port than its parent ("parentenv"), it would be more convenient to have that environment have an ...
0
votes
1answer
114 views

rm -rf on vhosts directory, what should I do?

I was tired and unfortunately I did: rm -rf * /var/www/vhosts repertory on my CentOS 6.3 running with Parallel Plesk. I lost many websites, but worst: I've lost chroot, default, fs and fs-passwd. ...
0
votes
1answer
93 views

Can't create a minimal chroot jail

Was trying to create a minimal chroot jail. The steps followed was: Created a folder chroot Copied bash to the folder chroot Run ldd bash to know the dependencies ldd /bin/bash linux-vdso.so.1 ...
6
votes
2answers
132 views

Which of proc, sys etc. should be bind-mounted (or not) when chrooting into a “replacement” distribution?

This answer to another question basically boils down to chrooting into another Linux distribution in order to mainly use that as a replacement to its too restricted (but irreplaceable) parent. The ...
2
votes
2answers
139 views

How do I `umount` /proc?

I am following this tutorial on how to do a firmware update to my NAND flash. I followed it only changing the directory where I am placing my new root. I am copying all of the /bin /dev /sbin /usr ...
0
votes
2answers
200 views

Cannot create root jail

I just tried to play around with chroot command only for testing purposes, in order to create a temporary root jail, but I didn't managed to. The platform is CentOS 6.4. and I have done it numerous ...
1
vote
1answer
753 views

Unable to get Wireless working during Arch Linux install

I'm following the Arch Linux install guide here: https://wiki.archlinux.org/index.php/Beginners%27_Guide I'm installing from a live disc. I've just used pacstrap to install the base system. I then ...
1
vote
2answers
6k views

vsftpd - Limit FTP access only to /var/www

I am running vsftpd as ftp server on my linux (rasbian), I log in to the machine as a root user. I would like to be still locked to using only /var/www, how can I configure vsftpd conf to accomplish ...
6
votes
1answer
1k views

chroot fails with --userspec when chroot is i686

I'm experiencing a problem with chroot... I'm running on Arch Linux x86_64. I have a 64 bit chroot and a 32 bit chroot. They are identical except that one is 32 bit and one is 64 bit. I can enter ...
2
votes
1answer
31 views

Does `build_packages` download all libraries again in the case of a failed build?

I have been trying to set up and build an image of the Chromium OS from the instructions available here. My laptop was running the build_packages script for about 7-8 hours after which it failed on ...
0
votes
1answer
110 views

32-bit on 64-bit: memory usage for multiple processes

I'm working on a Linux hosting solution for game server software, however the software in question is 32-bit and I'd be running 64-bit on the host. Now, I know I can run 32-bit apps on a 64-bit host ...
2
votes
1answer
190 views

Debian chroot blocking PTTYs on host

I've created a Debian-based chroot environment using debootstrap under Arch Linux, and fill it with life like this: #!/bin/sh mount -t proc proc $CHROOT/proc mount -t devpts devpts $CHROOT/dev/pts ...
1
vote
0answers
220 views

How do I run Gnome from a systemd-nspawn container in a second X server?

I'm using systemd-nspawn to "boot" a second Linux OS from a USB hard disk. I'd like to launch that OS's Gnome Desktop in a second X server running on the same machine on a different tty than the ...
2
votes
0answers
123 views

Running (X) Xfce4 in Debian chroot

I was trying to start Xfce4 in a chroot. The problem is that Xfce4 starts, shows default the UI but the USB keyboard and mouse are not working. My chroot script: #!/bin/bash mount --bind /dev ...