SSH Chroot FreeBSD 10.1 and 10.2

Johan Hendriks joh.hendriks at gmail.com
Sat Aug 22 13:32:13 UTC 2015


Hello all.

I want to use the Chrootdirctory feature of openssh on FreeBSD 10.2 And
I tried it on 10.1 but gave up...
Whatever I do I can not make it work on 10 without error messages, but I
got it working on FreeBSD 8

This is what I have in my /etc/ssh/sshd_config file.

# Example of overriding settings on a per-user basis
Match User testuser1
        ChrootDirectory /restricted/%u
        X11Forwarding no
        AllowTcpForwarding no

I created the dir /restricted and the directory testuser1 the
permissions are set to root owned.
I created the directory /bin inside /restricted/testuser1 and put the sh
file from /rescue there

If I log on to the system I get the following
ssh testuser1 at 192.168.1.14
Password for testuser1 at node_1:
Last login: Sat Aug 22 17:05:52 2015 from 192.168.1.13
Could not chdir to home directory /restricted/testuser1: No such file or
directory
Cannot read termcap database;
using dumb terminal settings.
%
>From here I can do ls and so on if I copy ls, mkdir and other programs
from /rescue to /restricted/username/bin , and can not escape my home,
this is what I want but the error messages are frustrating.
If I change to csh in /etc/passwd it gives me the following

sh testuser1 at 192.168.1.14
Password for testuser1 at node_1:
Last login: Sat Aug 22 17:16:32 2015 from 192.168.1.13
Could not chdir to home directory /restricted/testuser1: No such file or
directory
csh: Cannot open /etc/termcap.
csh: using dumb terminal settings.
%


I think I followed all the tutorials on the internet, and now I get to
the point it gets really frustrating. :D
I think I do something wrong, but I can not find it.

Is there someone who got this working on FreeBSD 10, I have it working
on my linux machines also without problem.

Thank you for your time.

regards
Johan








More information about the freebsd-stable mailing list