jailkit-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Jailkit-users] sftp only jail problem (connection closed)


From: Jordan Tomkinson
Subject: Re: [Jailkit-users] sftp only jail problem (connection closed)
Date: Tue, 22 Dec 2009 10:35:32 +0800

strace with -s 128 can be found at http://pastebin.com/m5749a2c6

Something to note, this server is Centos 5.2, I cannot reproduce this issue on my Centos 5.4 servers

Jordan

On Mon, Dec 21, 2009 at 4:12 PM, Olivier Sessink <address@hidden> wrote:
Jordan Tomkinson wrote:
I have followed the guide at http://olivier.sessink.nl/jailkit/howtos_sftp_scp_only.html but have run into this problem

Contents of my jk_lsh.ini:

address@hidden root]# cat /home/jail/etc/jailkit/jk_lsh.ini
[myuser]
paths = /usr/bin, /usr/lib/, /usr/libexec/openssh/
executables = /usr/bin/scp, /usr/libexec/openssh/sftp-server
devices = /dev/urandom, /dev/null

the section 'devices' is part of jk_init.ini and not jk_lsh.ini


what happens when myuser logs in:

address@hidden:~$ sftp address@hidden
Connecting to server...
address@hidden's password:
Connection closed


This is all that jk_socketd gives me:
Dec 21 15:38:40 server jk_chrootsh[19580]: now entering jail /home/jail for user myuser (503)
Dec 21 15:38:40 server jk_lsh[19580]: jk_lsh version 2.10, started

If i change /home/jail/etc/passwd from "/usr/sbin/jk_lsh" to "/bin/bash" everything works fine, so I know the jail itself is set up correctly - the problem has to be with jk_lsh somewhere.

an strace of the jk_lsh process reveals:

open("/dev/tty", O_RDWR|O_NOCTTY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
writev(2, [{"*** glibc detected *** ", 23}, {"/usr/sbin/jk_lsh", 16}, {": ", 2}, {"malloc(): memory corruption", 27}, {": 0x", 4}, {"08ebb2e0", 8}, {" ***\n", 5}], 7) = 85

I am at a loss here, any ideas?

can you send me a bit longer strace log (last 50 lines)? possiby with -s128 to get longer string sizes?

Olivier



_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users


reply via email to

[Prev in Thread] Current Thread [Next in Thread]