Comments on: chrooted SFTP with OpenSSH 5 http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/ The internet keeps getting better! Thu, 27 May 2010 08:12:36 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: tutorial: building an OpenSSH chroot jail on CentOS 5.3 « Erik’s Blog http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/comment-page-1/#comment-194 tutorial: building an OpenSSH chroot jail on CentOS 5.3 « Erik’s Blog Wed, 29 Jul 2009 03:53:04 +0000 http://97.107.129.26/2008/chrooted-sftp-with-openssh-5/#comment-194 [...] 1) http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/ [...] [...] 1) http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/ [...]

]]> By: building an OpenSSH chroot jail on CentOS 5.3 « Erik’s Blog http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/comment-page-1/#comment-193 building an OpenSSH chroot jail on CentOS 5.3 « Erik’s Blog Wed, 29 Jul 2009 03:52:09 +0000 http://97.107.129.26/2008/chrooted-sftp-with-openssh-5/#comment-193 [...] 1) http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/ [...] [...] 1) http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/ [...]

]]> By: Erik http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/comment-page-1/#comment-171 Erik Mon, 27 Jul 2009 04:45:33 +0000 http://97.107.129.26/2008/chrooted-sftp-with-openssh-5/#comment-171 I was able to compile and install openssh using a combination of your tutorial and this one: http://www.dotnux.com/?p=3. I'm still able to ssh in - so far so good. I was able to compile and install openssh using a combination of your tutorial and this one: http://www.dotnux.com/?p=3. I’m still able to ssh in – so far so good.

]]> By: Erik http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/comment-page-1/#comment-169 Erik Mon, 27 Jul 2009 01:55:05 +0000 http://97.107.129.26/2008/chrooted-sftp-with-openssh-5/#comment-169 Thanks for your follow-up comments. I kept running into trouble w/ an openssh dependency called "tcp_wrapper-devel", which I was able to track down, but the versions I found conflicted w/ the installed "tcp_wrapper" on my machine (sigh) .... This might have been sorted out in the update you mentioned. Out of curiosity, do you know if I set up a traditional chroot jail for a user, is the openssh chroot still required for sftp, ie does sftp subvert chroot jails, or is it just a convenient way to create a jail if sftp is the only functionality required? Thanks! Thanks for your follow-up comments. I kept running into trouble w/ an openssh dependency called “tcp_wrapper-devel”, which I was able to track down, but the versions I found conflicted w/ the installed “tcp_wrapper” on my machine (sigh) …. This might have been sorted out in the update you mentioned. Out of curiosity, do you know if I set up a traditional chroot jail for a user, is the openssh chroot still required for sftp, ie does sftp subvert chroot jails, or is it just a convenient way to create a jail if sftp is the only functionality required? Thanks!

]]> By: robbyt http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/comment-page-1/#comment-156 robbyt Sun, 26 Jul 2009 01:14:17 +0000 http://97.107.129.26/2008/chrooted-sftp-with-openssh-5/#comment-156 Another thing you might want to keep in mind is that this tutortial uses a fairly old release of OpenSSH. I don't know if there are any security problems with that version, so you might want to use the updated SRPM that came out later. http://ftp.ndlug.nd.edu/pub/fedora/linux/updates/9/SRPMS.newkey/openssh-5.1p1-3.fc9.src.rpm Another thing you might want to keep in mind is that this tutortial uses a fairly old release of OpenSSH. I don’t know if there are any security problems with that version, so you might want to use the updated SRPM that came out later.

http://ftp.ndlug.nd.edu/pub/fedora/linux/updates/9/SRPMS.newkey/openssh-5.1p1-3.fc9.src.rpm

]]> By: robbyt http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/comment-page-1/#comment-155 robbyt Sun, 26 Jul 2009 01:04:38 +0000 http://97.107.129.26/2008/chrooted-sftp-with-openssh-5/#comment-155 Thanks! Remember, you can always compile the RPM on another server so that you don't have to muck up your production machine with unessential stuff. Thanks! Remember, you can always compile the RPM on another server so that you don’t have to muck up your production machine with unessential stuff.

]]> By: Erik http://v2.robbyt.com/2008/howto/chrooted-sftp-with-openssh-5/comment-page-1/#comment-153 Erik Sat, 25 Jul 2009 21:12:16 +0000 http://97.107.129.26/2008/chrooted-sftp-with-openssh-5/#comment-153 Thanks for posting this howto. I'm going through it now. One thought: it looks like "rpmbuild -bb SPECS/libedit.spec" should be "rpmbuild -bb /usr/src/redhat/SPECS/libedit.spec". Also, I'm building on a minimal install of Centos, which didn't come w/ devel tools, so the line above fails when trying to find a compiler. I'm installing "Developer Tools" now (#yum groupinstall "Developer Tools"), in an effort to remedy this. Fingers crossed. Thx again. Thanks for posting this howto. I’m going through it now. One thought: it looks like “rpmbuild -bb SPECS/libedit.spec” should be “rpmbuild -bb /usr/src/redhat/SPECS/libedit.spec”. Also, I’m building on a minimal install of Centos, which didn’t come w/ devel tools, so the line above fails when trying to find a compiler. I’m installing “Developer Tools” now (#yum groupinstall “Developer Tools”), in an effort to remedy this. Fingers crossed. Thx again.

]]>