A chroot on Unix operating systems is an operation that changes the apparent root directory for the current running process and its children. A program that is run in such a modified environment cannot name (and therefore normally not access) files outside the designated directory tree.

learn more… | top users | synonyms

1
vote
2answers
49 views

“SSH Virtual Kiosk”. Does “PermitEmptyPasswords yes” work? - How to make ssh user with empty password, so random users can use it?

How to make properly secure ssh account with empty password for running trusted binary? I'd like to make a kind of "virtual ssh Kiosk" for random users, while limiting "demo app" behind ssh ...
0
votes
3answers
2k views

TERM variable in chroot

I've created a chroot with the help of jailkit and now I'm trying to install some other libraries and tools. First I tried to install clear library. I've copied the file from the /bin folder and ...
0
votes
2answers
68 views

Sandbox alike solution for linux

I wonder if there is a kind of a sandboxing solution for linux, sometimes there is more than one app that is candidate to solve my problems, in that case I want to try all of them to get the one which ...
0
votes
0answers
16 views

unable to setup chroot in ubuntu 14.04 [closed]

strace /usr/sbin/chroot /opt/chroot/ opt/chroot/usr/local/nginx/sbin/nginx -t execve("/usr/sbin/chroot", ["/usr/sbin/chroot", "/opt/chroot/", "opt/chroot/usr/local/nginx/sbin/"..., "-t"], [/* 23 ...
4
votes
1answer
111 views

Separate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
2
votes
1answer
20 views

Can I use `internal-sftp` when using wrapper script with `ForceCommand` in sshd?

I use /etc/ssh/wrapper.sh script, like in tutorial, that filters which commands are allowed to be run via ssh and logs them. Currently when internal-sftp is required, I use /usr/lib/sftp-server. Is ...
4
votes
1answer
893 views

How do I run chromium inside a chroot?

Okay, I can run Iceweasel 17 ESR fine and some simple X apps like xkill, so I know that it's not merely an X display problem. However any version of Chromium and Iceweasel 24 fail with the following ...
3
votes
1answer
2k views

Chroot gone wrong, can't ssh with user

Distribution: Scientific Linux 6.5 (Carbon), not exactly your typical brand of linux. Tried to chroot a user using these instructions for SSH and quite obviously failed, and now I can't even log in ...
10
votes
3answers
1k views

Boot into a chroot?

I have Linux (Debian Jessie) installed on a hard drive. Drive - sda1, ext4fs, and sda2 - swap I have a /chroot folder. There is installed another system, in /chroot folder. Question: How to tell ...
2
votes
1answer
29 views

Why does uname -m report differently in chroot and schroot environment?

I am running Ubuntu 14.04.2, 64 bit host system. Using debootstrap, I installed a minimal Ubuntu 14.04.2, 32 bit system in trusty32 directory. This is what my schroot configuration look like: ...
0
votes
0answers
21 views

KVM on Crouton chroot?

I've enabled Vt-x support in BIOS, and have been trying to get KVM on my chroot for a few days now. I lost my chroot last night (got it into an unbootable state) trying and had to build a new one. ...
0
votes
1answer
14 views

Unable to mount SD card at crouton startup

I am just starting out running Ubuntu trusty through crouton on my chromebook, and I am attempting at mounting my sd card at startup. I currently have a shell script which mounts the sd card when it ...
0
votes
1answer
32 views

Xming for Linux? (Aka run a display/x11 server inside a window)

With Xming I can run an X11 server inside a window and then run mate-session to get a very fast remote desktop inside a window. On Linux, I'm not entirely sure how to X11 forward mate-session to just ...
18
votes
6answers
21k views

How can I chroot into a filesystem with a different architechture?

I'm trying to chroot into a Arch Linux ARM filesystem from x86_64. I've seen that it's possible to do using static qemu by copying the binary into the chroot system: $ cp /usr/bin/qemu-arm ...
1
vote
1answer
1k views

Apache + mod_fcgid + chroot with mod_security. CentOS/RHEL 6

I am trying to setup a web server running Apache + mod_fcgid + mod_security chroot enabled and having a real hard time to get this working. Apache was installed from official CentOS repo and mod_fcgid ...
4
votes
1answer
1k views

suexec with chrooted environment

I'm trying to get a chrooted Apache environment working running mod_fcgid with suexec. Looking at suexec log inside jail, the wrapper scripts are being executed with no problems, however, when I look ...
0
votes
0answers
13 views

How to configure vsftpd to use /opt/etc/passwd to authenticate

I have FTP setup on Solaris 8 and I am trying to migrate it to RHEL7. Present Architecture on Solaris FTP daemon is chrooted under /opt. When users try to login to FTP, they are authenticated with ...
0
votes
0answers
15 views

chroot into a Linux with X window system installed, from a Linux without X window system, and then run xinit, there is no mouse and keyboard working

I have two systems on my machine. One is Ubuntu and the other one is Linux from scratch (LFS) which I built it my self. Ubuntu has X window system installed but LFS has no windowing system ...
38
votes
4answers
13k views

chroot “jail” - what is it and how do I use it?

I have heard/read a lot about the chroot jail under linux but have never yet used it (I use Fedora day-to-day), so what is a chroot "jail"? When and why might I use it/not use it and is there anything ...
2
votes
1answer
86 views

How to write in home user with chrooted sftp

I have a problem with chroot sftp an their home folder. I would like to write in user's home but I don't have proper permission for doing that. sshd_config Match User demo ChrootDirectory %h ...
3
votes
1answer
52 views

Why is chroot(2) unavailable to unprivileged users?

Why is chroot(2) unavailable to unprivileged users? I don't understand existing answers on the Internet. For example this one ...
0
votes
1answer
42 views

avahi-daemon fails to start with “Failed to chroot(): Permission denied”. But only without stderr-IO-redirection

After a recent upgrate, avahi-daemon is not starting up anymore. Furthermore, the behaviour differes weather if I redirect stderr to a file or not. If I start avahi-daemon --debug with debugging ...
0
votes
0answers
22 views

Installing specific version of python and its dependencies in chroot enviroment

I'm trying to install python from source on chroot environment in CentOS 7.1, If I'm using ./configure --prefix=/chroot but I need to find the dependencies and copy them to chroot directory also, How ...
20
votes
5answers
150k views

How to create a FTP user with specific /dir/ access only on a Centos / linux installation

So I'm on a VPS - CentOS Linux installation. I have vsFTPd on the server. I currently have SFTP access to the server via my root user, but am now trying to create a new user with FTP access to a ...
0
votes
1answer
17 views

Assigning output to variable in automated chroot script

For the life of me, I cannot figure out how to chroot through a script, and assign a value to a variable. Okay, so I learned how to chroot and execute commands from a script without halting the flow ...
1
vote
0answers
41 views

Python installation fails in chroot

I tried to install Miniconda Python in a chroot: chroot $1 wget -q https://repo.continuum.io/miniconda/Miniconda3-3.19.0-Linux-x86_64.sh -O /tmp/miniconda.sh ...
2
votes
1answer
1k views

Any better alternative to chroot on an OpenVZ VPS?

Are there any better alternative to chroot environment? I'm thinking about running nginx on a jailed environment. BTW, I'm on OpenVZ VPS, so modifying the Kernel is a no-no. (I think that prevents ...
0
votes
0answers
19 views

SFTP doesn't allow browsing for users (only root allowed) [duplicate]

I am trying to create the user which will have restrictions to get out of his home directory. Everything works fine with the "root" user, but other users have the problem. They're in "sftpusers" group ...
2
votes
1answer
30 views

Running maintenance commands in pbuilder chroot using cron

We run an automated build system using pbuilder-dist. We use it to build our open source project Snap Websites to produce nightly builds. Currently we are building against Ubuntu "trusty." The issue ...
1
vote
1answer
59 views

sbuild schroot fails

I am trying to package an Ubuntu package as a Debian package. For maintainability I am trying to use sbuild. Following the steps here I go through the first five steps, but when I try to build I get ...
0
votes
0answers
79 views

Directory does not exist inside the chroot

I'm trying to setup an ubuntu scope project using the setup wizard from the ubuntu sdk ide. The last step in this wizard is to run cmake, but I get the following error: E: Failed to change to ...
0
votes
0answers
40 views

file permissions is getting differed with the umask value while using sftp

I have set up the jail rooted sftp environment on port 222 with umask 0002. I have created the jail rooted user whose home directory is on nfs mount point. When I have tried to upload the files , I ...
1
vote
0answers
32 views

How to 'snapshot' a chroot?

I want to perform something similar to a 'clone' on vmware fusion/virtualbox/a VM manager. Host and chroot are both ubuntu. One complicating factor may be that this chroot may have one or more child ...
3
votes
1answer
3k views

How to assign an additional IP/hostname to a chrooted environment?

While I can simply have e.g. sshd in a chroot environment ("chrootenv") listen to a different port than its parent ("parentenv"), it would be more convenient to have that environment have an ...
0
votes
0answers
13 views

Change permissions of /opt folder [duplicate]

Maybe this is dumb from the security point of view. But I would like to change permissions of /opt folder to 775 (or 777). Enabling the user to modify its content. Is this ok or does that pose a ...
2
votes
2answers
1k views

CHROOT: Unable to copy files to jailed users directory from local machine using WINSCP

I've setup a chroot environment for one of my users called client on my system. I'm using WINSCP to connect to my server from my machine using public key authentication. Everything works fine, I can ...
3
votes
1answer
37 views

How to detect the architecture of the chroot from inside the chroot?

Let's say for example the host system is running Debian amd64. And on that system, another Debian i386 has been installed inside a folder using debootstrap. Then assume a shell script is running ...
0
votes
1answer
35 views

How to run command after entering postgres

I am trying to execute ls after opening a new Guake tab and logging into postgres. guake -n guake -e 'sudo -i -u postgres && ls' The command successful opens a new tab then prompts me for ...
1
vote
1answer
201 views

debian jessie volume group not found and cant boot

I have accidentally deleted my boot partition. OS is Debian Jessie with LUKS LVM. I have created a new partition and successfully reinstalled grub with chroot method. Now when I try to boot, my root ...
1
vote
0answers
32 views

Build errors on a copied operating system in a chroot

I'm in a bit of an interesting situation. In an attempt to have root access on my school's physics network computers, I ended up creating a chroot environment, using fakeroot and fakechroot. As every ...
0
votes
1answer
43 views

How to protect from chrooting to its linux partition and how to chroot it after using the protection?

I am currently using archlinux, It is possible to boot on an archlinux installation iso for instance, to mount my current archlinux partition and my boot partition and then to use arch-chroot. Then I ...
0
votes
0answers
116 views

bash errors getcwd: cannot access parent directories

I cross-compiled GNU bash v4.3 but am now getting errors related to: shell-init: error retrieving current directory: getcwd: cannot access parent directories: Function not implemented and chdir: ...
1
vote
1answer
75 views

How can I use debian_chroot in bashrc to identify the chroot env?

I see the following in ~/.bashrc : if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then debian_chroot=$(cat /etc/debian_chroot) fi which means if the variable is ...
1
vote
1answer
46 views

How can I boot into a chroot, without leaving the current OS session?

I'm building Linux systems, turn them into ISOs and then test them in a VM. But that step takes minutes, which I would like to avoid, while developing. Is there a way I can take the files, which are ...
1
vote
0answers
47 views

Trigger a GTK application from CHROOT during LightDM startup

I am trying run a GTK application with chrooted environment. Mentioned are the lightdm settings which I have set. System configuration: OS : Debian 8 chroot FS: Debian 6 Windows manager : LXDE ...
4
votes
1answer
691 views

How do I run Gnome from a systemd-nspawn container in a second X server?

I'm using systemd-nspawn to "boot" a second Linux OS from a USB hard disk. I'd like to launch that OS's Gnome Desktop in a second X server running on the same machine on a different tty than the ...
0
votes
2answers
40 views

how to mount -t proc proc proc/ with their absolute path for a chroot?

as we know chroot needs some fs to be mounted inside chroot directory like the following : chroot_dir=/some/where cd $chroot_dir/ mount -t proc proc proc/ mount --rbind /sys sys/ mount --rbind ...
1
vote
2answers
34 views

How is OpenSSH sftp jail/chroot working?

This question is actually too broad... What I really want to know is whether or not it actually chroots and, if so, how a SSH user deamon[1] can be launched in that jail in spite of the obvious lack ...
2
votes
1answer
58 views

Is there a way to isolate a running program from the rest of a Linux system?

First of all, I know about virtualisation and containers. I'm sure "he wants containers" is what popped in your mind. (Don't deny it!) However containers are like chroot: if you want to execute bash ...
1
vote
0answers
177 views

unix chroot jail shell (with or without sudo?)

at the moment I am creating a chroot jail. Therefore I read some articles and everything seems to be clear, exept for one thing: the chroot jail shell In one source they created the following setup ...