Re: Linux chroot

scott.seiler@xxxxxxxxx wrote:

Hi,

Due to organizational restrictions, we are forced to use an
implementation of OpenSSH that does not allow for it to be run in a
chroot jail natively. I have run ldd against all the necessary
programs, but cannot seem to get the jail setup properly. When I try
to run sshd, I get the following error:

Privilege separation user sshd does not exist

The /etc/passwd and /etc/shadow files both contain this user.

To troubleshoot this, I copied su into the environment and receive
this error when I try to su to root (as root):

su: user root does not exist

The permissions on the /etc/passwd file are set to 644 and /etc/shadow
is set to 400.

I don't understand why these files are not being processed. Any help
would be greatly appreciated.

Scott

Can you provide information on exactly how you set it up and configured
it? I ask because there are a lot of tutorials on how to do this, and
some are not accurate. Depending on what one you've followed or how
you've attempted to do this, it might not be a solution of configuring
it differently or an additional step only, but maybe you'll need to
revert (undo) a few things and go back before you can go forward.
Also, are you sure you want to be able to su to root in a jailed
environment?
--
Tim Greer, CEO/Founder/CTO, BurlyHost.com, Inc.
Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers
and Custom Hosting. 24/7 support, 30 day guarantee, secure servers.
Industry's most experienced staff! -- Web Hosting With Muscle!
.

Relevant Pages

  • Re: Debian: readonly root filesystem using /dev/root
    ... My root filesystem had for some reason been mounted readonly. ... to see if they have a low-level testing utility; ... Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers ...
    (comp.os.linux.misc)
  • Re: Debian: readonly root filesystem using /dev/root
    ... My root filesystem had for some reason been mounted readonly. ... Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers ...
    (comp.os.linux.misc)
  • Re: run as a lesser user in order to help security.
    ... listen to port 80(only root users can bind to ports lower than ... but it then gives up its root permissions and start all of ... root process or having SUID root. ... Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers ...
    (comp.os.linux.misc)
  • Question about SSH_CONNECTION
    ... at ip address a.b.c.d displays this with phpinfo: ... Presumably, this means that root is logged in via SSH, from a machine at ... hosting a.b.c.d)? ... Sorry for munging the ip's but this question involves a spammer's ...
    (comp.security.ssh)
  • OpenSSH_3.8.1p1 PermitRootLogin with bastille
    ... configuring manually the bastille, root is able to login with ssh. ... (I used bastille -c to configure it "manually" with Question/Answer ... By the way bastille should be configured that root couldn't login directly ...
    (SSH)