CHROOT implemented by ISPconfig

[PermaNoob]

That would be cool

[till]

ISPConfig has this function already.

[PermaNoob]

Originally Posted by till

ISPConfig has this function already.

How do I implement it then? -- because users I create can browse the entire directory tree.

[till]

1) Install a SSH daemon that is patched for chrooting by following step 2.1 and just this one step from the following tutorial:

http://www.howtoforge.com/chroot_ssh_sftp_debian_etch

2) Enable chrooting in the ispconfig config.inc.php file. All new or updated users are now chrooted.

[newmember]

Looking good for me.

I had to install libpam0g-dev on ubuntu.

apt-get install libpam0g-dev

then restarted ssh service:

/etc/init.d/ssh restart

Enjoy..

For me know all my users can use SFTP.
They were already using FTPES and FTP.

[till]

Do not edit the password file, ISPConfig will remove your changes. You must enable chrooting in ispconfig as I pointed out above.

[Norman]

Is this chroot safe from jailbreaking?
There are a couple known approaches to this. Some exploits using procmail for example in one of the chroot guides described which allows someone to break the chroot.