SSH Chroot FreeBSD 10.1 and 10.2
Johan Hendriks
joh.hendriks at gmail.com
Sat Aug 22 13:32:13 UTC 2015
Hello all.
I want to use the Chrootdirctory feature of openssh on FreeBSD 10.2 And
I tried it on 10.1 but gave up...
Whatever I do I can not make it work on 10 without error messages, but I
got it working on FreeBSD 8
This is what I have in my /etc/ssh/sshd_config file.
# Example of overriding settings on a per-user basis
Match User testuser1
ChrootDirectory /restricted/%u
X11Forwarding no
AllowTcpForwarding no
I created the dir /restricted and the directory testuser1 the
permissions are set to root owned.
I created the directory /bin inside /restricted/testuser1 and put the sh
file from /rescue there
If I log on to the system I get the following
ssh testuser1 at 192.168.1.14
Password for testuser1 at node_1:
Last login: Sat Aug 22 17:05:52 2015 from 192.168.1.13
Could not chdir to home directory /restricted/testuser1: No such file or
directory
Cannot read termcap database;
using dumb terminal settings.
%
>From here I can do ls and so on if I copy ls, mkdir and other programs
from /rescue to /restricted/username/bin , and can not escape my home,
this is what I want but the error messages are frustrating.
If I change to csh in /etc/passwd it gives me the following
sh testuser1 at 192.168.1.14
Password for testuser1 at node_1:
Last login: Sat Aug 22 17:16:32 2015 from 192.168.1.13
Could not chdir to home directory /restricted/testuser1: No such file or
directory
csh: Cannot open /etc/termcap.
csh: using dumb terminal settings.
%
I think I followed all the tutorials on the internet, and now I get to
the point it gets really frustrating. :D
I think I do something wrong, but I can not find it.
Is there someone who got this working on FreeBSD 10, I have it working
on my linux machines also without problem.
Thank you for your time.
regards
Johan
More information about the freebsd-stable
mailing list