Kilzool wrote:You could write your own SHELL, and chroot them into it.As much as I would like to write my own SHELL, and chroot them into it, I'm not an advanced enough user to do something like that. Maybe someday, but not at the moment.
agent_smith
https://bbs.archlinux.org/profile.php?id=65632
2012-11-29T05:33:18Z
I've had this problem a few times, but I'm hoping somebody can shed some light on the matter.
I first experienced this when I first started remastering LiveCD's for 11.10beta1 to make a Gnome Shell default install instead of Unity.
In my Android-hosted Ubuntu 13.04 chroot, I am attempting to get gnome-shell running on Xvfb. I've handled rendering issues as far as I know, and now I'm having trouble with gnome-shell. I suspect D-Bus.
I've gotten D-Bus running in my chroot by using this special python-based replacement of upstart and running /etc/init.d/rcS, /etc/init.d/rc 2 and start upstart. X starts up swimmingly.
I've been playing around with CentOS box for couple of years now. So I'm pretty comfy with terminal. However, I read a lot of blog-post claiming that chroot is insecure and amount of those posts frightens. Is it really so? Why?
I use chroot to lockdown the SFTP-only users in specific context, without any shell or commands at all.
Recently I'm being told that a user has my system 'shelled.' While there hasn't been any unusual activity or errors in Apache error log, etc.. I'd rather be safe than sorry.
So: If I run chroot Apache, will it prevent shell scripts being able to retrieve sensitive info? I.e.
I've successfully set up SFTP to chroot a user to their home directory.
However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me wonder if I can do this.
I need to have a user, say, "fileadmin" that can create new folders under their home folder (via SFTP - they won't be logging in with a shell unless something is being debugged/e
I have a number of LVM partitions, each containing an Ubuntu installation. Occasionally, I want to do an apt-get dist-upgrade, to update an installation to the most recent packages.
I'm attempting to setup OpenSSH on Ubuntu 12.04 to allow the following
User can only SFTP (no shell access)
User can write (upload) files
Access is secure such that no user can view another user's files and cannot compromise the server
To that end I attempted to setup Chroot following
https://help.ubuntu.com/community/SSH/OpenSSH/Configuring
http://www.serverubuntu.it/SFTP-chroot
Unfortunat
I'd like to rsync (backup) a chroot environment from outside the chroot.
For that I first make a lvm snapshot of the chroot volume and then run rsync on that.
The only problem with this approach: Symlinks that inside the chroot are absolute are now pointing to the outer-chroot-system and are of course not matching.
Email this page
