LinuxQuestions.org - Blog Entries

sshd chroot jails based on hostname and SELinux

Posted 04-01-2013 at 10:46 AM by sag47
Updated 04-01-2013 at 10:51 AM by sag47

Tags chroot, jenkins, security, selinux, sshd

Why chroot jails based on host name?
If you don't care about the background info just jump to Setting up sshd chroot jail and SELinux.

So I have started configuring automated deployments through my organization using a continuous integration server called Jenkins. I'll post more on Jenkins regularly so that eventually you can have a series of posts which wrap up into a nice and secure howto for Jenkins. So here's why I want chroot jails based on host names.

...

sag47

Senior Member

Posted in SELinux Adventures

Views 236 Comments 0 sag47 is offline

OpenSSH daemon hardening ( Part 3 ) - Setup a chroot enviroment on CentOS with JailKit[ANNOUNCEMENT]

Posted 12-10-2010 at 08:16 AM by angelo.fonzeca (Angelo Fo. personal blog)
Updated 12-13-2010 at 06:31 AM by angelo.fonzeca

Tags chroot, linux, security, sftp, ssh

[Note: This is a draft version of the post; it'll be revised as soon as possible]

Introduction - What is a chroot?

"A chroot on Unix operating systems is an operation that changes the apparent disk root directory
for the current running process and its children. A program that is
re-rooted to another directory cannot access or name files outside that
directory, and the directory is called a "chroot jail" or...

angelo.fonzeca

PerseusGuard Developer

Posted in Linux Security

Views 1321 Comments 0 angelo.fonzeca is offline

chroot PHP for use with nginx

Posted 10-31-2010 at 10:40 AM by Web31337 (In The Middle Of Nowhere [edK's blog])

Tags chroot, gentoo, nginx, php, security

I never had to deal with chrooted environment before, and there isn't lots of info out there on the net. Best result I've found so far is http://www.cyberciti.biz/tips/howto-...oted-jail.html
Actually, it covers almost entire topic, but I'm going to explain how to bind it with nginx in gentoo linux environment.
Say, you have a site example.org with some app you don't really trust in /app dir. Your own-written site scripts are executed in non-chrooted PHP environment...

Web31337

Member

Posted in opensource, security

Views 3080 Comments 0 Web31337 is offline

Total Blogs

1,715

Total Entries

5,043

Entries in Last 24 Hours