Re: Openssh5 Chrootdirectory ?!

yanaski@xxxxxxxxx wrote:
I from paris !
I've intalled the new openssh 5.0 ! ... i just discovered chroot , i
read many howtos on how chroot works. There are many howtos about how
to input a new shell whitin a chrooted envirnonnement .. but none with
the new openssh !
i'would like to now if someone could help me implemanting bash within
this jail !
i've already manage to use sftp, and my user is well chrooted in his
homedirectory !

well ... if anyone can show me the way ... (:

Thanks.
Lx.

Welcome to the land of philosophy and unsupported features. There have been a number of patches to OpenSSH published to support this, but the maintainers have *NEVER* accepted them into the main codeline. It's not trivial to set up: you need to add the patches, which typically involving setting a user's home directory to use a '/./' to designate where the root of the chroot cage goes, and and install a small environment there, capable of actually running SSH binaries. It's not supported in OpenSSH, previous discussions have shown that it never *will* be supported unless there's a big change in the set of maintainers or their coding practices, and

This is precisely why I tell people who need a secure file-transfer repository to simply use WebDAV over HTTPS. If you really need chroot for OpenSSH, there are a number of guidelines on how to set it up. The set at http://blog.wanderinglost.ca/?p=9 seems quite legible.
.

Relevant Pages

  • Re: is there a market waiting to be discovered?
    ... Currently I am interested in chroot feature and it ... > be lots of patches for openssh but it looks like a mess out there. ... > not just chroot but there could well be other features in ssh.com ...
    (comp.security.ssh)
  • Re: Good secure file transfer, was Re: How safe are FTP servers?
    ... To avoid that, avoid SSH, or chroot it (which is well ... chrooting OpenSSH is possible. ... The chroot option in OpenSSH has nothing to do with restricting users ...
    (comp.os.linux.security)
  • Re: ssh and /etc/group
    ... What OS are you using and what version of SSH? ... login name, shell, UID and GID from the passwd file information, obtained ... First things first: replace with OpenSSH. ... ssh-2.2.0 as under OpenSSH with the 2.9.x chroot patch? ...
    (comp.security.ssh)
  • Re: chroot, scp and security on RedHat 8.0
    ... > chroot jail if a key file exists in the home directory of the login ... instead of the chroot openssh patch to several people, ...
    (Focus-Linux)
  • Re: Chrooting Openssh
    ... Subject: Chrooting Openssh ... > Generally chroot defeats the purpose of OpenSSH. ... password required /lib/security/pam_pwdb.so shadow use_authtok md5 ...
    (Focus-Linux)