Chroot SSH + ISPConfig

[Norman]

Does anyone have any tutorial for this? Is it possible and relatively easy to do without breaking the system for current ISPconfig users?

[jameso]

I am also interested in information on how to do this.

Does anyone have any information on how to do this without affecting ISPConfig?

Thanks.

[falko]

Take a look here: http://www.howtoforge.com/forums/sho...+ssh+ispconfig

[jameso]

Hi falko,

Thanks for your reply, however that howto talks about the chroot limiting users to /home/chroot.

I wish to be able to set up my server so that when each ISPconfig user logs in, they are limited to their /var/www/webx/ directory, and cannot go outside of this. Obviously the root account should be able to go anywhere.

Any hints?

Thanks.

[till]

Please install the chroot as described in the howto that falko posted. The setup is the same if you want to chroot to /home/chroot or to the user directories in ISPConfig. Then enable chrooting in ISPConfig in the file /home/admispconfig/ispconfig/config.inc.php

By the way, you will find many posts that tell you the same when you search the forum for the word chroot

[jonwatson]

Hello,

I've just discovered that my shell users aren't chrooted. Yikes!

Anyhow, I followed the Howto that Falko pointed to and all seemed to go well, but I'm not getting the desired behaviour. None of my users can log in - they are all greeted with a /bin/bash file or directory does not exist error when they try to log in.

I have enabled the chroot option in config.inc.php and bash does exist in /chroot/home/bin.

I have restarted both ssh and ispconfig_server.

My users from /etc/passwd look like this:

test.domain:x:1008:1013:test:/var/www/web13/user/test.domain/./:/bin/bash

which looks right to me in that the '.' appears in the right place. I'm not sure why ISPConfig is putting a :/bin/bash after it, though, but I'm not chroot expert by any means so that may be correct.

The user in question has the shell access option checked under his user settings and the web in question has shell access enabled as well.

Any idea where I'm going wrong?

Thanks!

Edit: ISPConfig 2.2.11