Re: ssh chrooted enviroment WITHOUT /bin /etc /lib - etc etc in the users dir ?

From: teddy (mouschi@cheese-head-state.rr.com)
Date: 01/24/03 

From: "teddy" <mouschi@cheese-head-state.rr.com>
Date: Fri, 24 Jan 2003 17:34:31 GMT

"Neil" <neil.mooney@cern.ch> wrote :
> Hi All

Hello

> I have been looking for a chroot patch to ssh for a while.
> I have seen and tried most of them , but they all seem to require that
> the user has a chroot enviroment in the home dir,
[snip the rest]

If you don't care that they can see each other's home directories, then you
can create a single chroot for them all with their actual homedirs within
it.

Chroot is /usr/chroot/
User's _Actual_ homedir would be /usr/chroot/home/teddy
When a user ftp://teddy@asdf/ they're put in /usr/chroot/home/teddy - no bin
dirs visible unless they 'cd ..'
When a user ssh teddy@asdf they're put in /usr/chroot/home/teddy - and can
use /usr/chroot/bin/bash

I don't know what you mean by bin/lib dirs confusing a user. If they're
gonna be ssh'ing in they know what it is.

-teddy

Relevant Pages

  • Re: Need advice on setting of an SSH server for untrusted users
    ... > I've just set up an ssh server so that my customers can download code ... I've set up ssh so that it requires rsa authentication. ... There is a patch for openssh that will cause it to do a chroot like ... The issue with a chroot jail for ssh is that you have to hand-roll the ...
    (comp.os.linux.security)
  • Re: Problems with Sudo
    ... you can't sudo to root. ... SSH is generally allowed, all limitations should still apply including ... secure, the internet is a very dangerous place. ... allowing someone to break out of a chroot jail by simply logging back ...
    (Ubuntu)
  • Re: sftponly
    ... provided the server is secure or what other services/interfaces you ... > I agree - chrooting is a good practice, and I wouldn't set SSH up without ... > you pair them with a chroot jail. ... Of course they can do more with SSH access, ...
    (SSH)
  • Re: Chroot environment for ssh
    ... > would like to use SSH for the connections, as opposed to FTP, but I ... > users to be able to log into an interactive shell and I ... > want them to 'escape' out of their home directories. ... directives to chroot the groupand/or userthat are to have ...
    (FreeBSD-Security)
  • sftp with chroot
    ... chroot, so that users can be jailed to their home folder only. ... But sftp does not restrict to ... I tried to patch the Openssh 4.3p2 source code from openssh.org as given ... No output written to ssh ...
    (SunManagers)