Yet another jailkit thread

[simpim]

Hello all, I am having problems with jailkit when i use sftp. It doesnt seem to be working at all.

My setup;
linode server, ubunto 10.04 LTS
i installed jailkit before i installed ISPconfig.

jailkit version 2-.13
ISPConfig version 3.0.3.2

Everything seems fine so far, when i go to ISPconfig i add a client, then i add a website, i log out and login as teh client and create a SSH account. I can login using filezilla of putty using the new user but i can brows everywhere.

I did the following;

tail -f /var/log/auth.log

and the result was

Feb 16 15:32:45 li244-246 sshd[22340]: Accepted password for joesss from x.x.x.x port 52274 ssh2
Feb 16 15:32:45 li244-246 sshd[22340]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 16 15:32:45 li244-246 sshd[22340]: pam_unix(sshd:session): session opened for user joesss by (uid=0)
Feb 16 15:32:45 li244-246 sshd[22358]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 16 15:32:45 li244-246 jk_chrootsh[22360]: now entering jail /var/www/clients/client1/web1 for user joesss (5004)

I changed the IP to x's
Let me know if i posted the correct information.

[till]

As far as I know, you cant use sftp then. Please use ftps instead, which is the secure version of FTP and supported by all major ftp clients as well.

[simpim]

Originally Posted by till

As far as I know, you cant use sftp then. Please use ftps instead, which is the secure version of FTP and supported by all major ftp clients as well.

Thanks for te quick reply till.

Im not sure i follow what you mean. why cant I use sftp? It does work fine, I can login but its not limiting the browsing to their specific directory.

[till]

With sftp or with a normal ssh putty session?

[simpim]

Originally Posted by till

With sftp or with a normal ssh putty session?

Both work. I can login using putty and i can use filezilla on sftp. I just noticed that even though i can browse the entire file system, its doesnt show all the directorys that root sees, maybe 80%

[till]

OK, so the jail works fine. A jail always contains copys of system directories that are needed by the programs that are installed inside the jail to work properly.

[simpim]

Originally Posted by till

OK, so the jail works fine. A jail always contains copys of system directories that are needed by the programs that are installed inside the jail to work properly.

I had no idea of this info. Thank you very much for the help till!

[simpim]

Is there a way a user can do any damage by removing some of the files or directories in his SSH account? or is the damage limited to his account only?

[till]

The user is limited to his account in the jail, so he can only mess up its own account.