Re: [Jailkit-users] Jail has wrong ownership

[Branislav Viest]

Sorry bro (@nash oudha), but evidently you have not idea what are you talking about. You do better when you leave this mailling list instead.

V případě jakýchkoliv dotazů nebo otázek se na mě neváhejte obrátit.

------------
S přátelským pozdravem / Best Regards

Branislav Brian Viest
linux administrator
------------
Legal Disclaimer: This e-mail and any attached files are confidential and may be legally privileged. If you are not the addressee, any disclosure, reproduction, copying, distribution, or other dissemination or use of this communication is strictly prohibited. If you have received this transmission in error please notify the sender immediately and then delete this e-mail. The sender does not accept liability for the correct and complete transmission of the information, nor for any delay or interruption of the transmission, nor for damages arising from the use of or reliance on the information. All e-mail messages addressed to, received or sent by sender are deemed to be professional in nature. Accordingly, the sender or recipient of these messages agrees that they may be read by other sender employees than the official recipient or sender in order to ensure the continuity of work-related activities and allow supervision thereof.

---

Od: "nash oudha" <nash.oudha@gmail.com>
Komu: "jailkit-users" <jailkit-users@nongnu.org>
Odoslané: štvrtok, 12. november 2020 19:51:57
Predmet: Re: [Jailkit-users] Jail has wrong ownership

Sorry to put my nose here. but your jailkit never worked for anyone.

This one does: https://www.cyberciti.biz/tips/howto-linux-unix-rssh-chroot-jail-setup.html

I'm unsupscriping

On Thu, Nov 12, 2020 at 2:31 PM Bob Schuon <bob.schuon@loungelizard.com> wrote:

Olivier,

 

Thank you for your reply!  Unfortunately (or fortunately, for security’s sake), ISPConfig locks that webxxx folder, and a standard chown will fail, even with sudo/root.

But, good news!  I found the article I was looking for, which shows how to (temporarily) remove the protection to fix the ownership/permissions.

https://popoleodesigns.com/unset-ispconfig-3-folder-security/

 

As soon as the ownership is fixed, the ssh works once more.

Thank you for your help, and your fantastic software!

 

Best Regards,

 

--
Bob Schuon / Senior Developer
Lounge Lizard Worldwide Inc.

- Best of Breed Since 1998
tel 1-888-444-0110 ext 108 | e-fax 1-888-308-8990 | www.loungelizard.com

NYC
112 West 34th Street
18th Floor
New York, NY 10120

Long Island
31 West Main Street
Suite 212
Patchogue, NY 11772

Washington D.C. Metro
1101 Connecticut Avenue NW
Suite 450
Washington, DC 20036

Los Angeles - California
1100 Glendon Avenue
17th Floor
Los Angeles, CA 90024

 

 

From: Olivier Sessink
Sent: Thursday, November 12, 2020 3:43 AM
To: jailkit-users@nongnu.org
Subject: Re: [Jailkit-users] Jail has wrong ownership

 

No experience with ISPConfig, but if you have terminal access it is an easy fix.

 

you can run 'chown root:root /path/to/jail' and that will fix the problem. jk_check -j /path/to/jail will report if there are more issues.

 

If there are multiple directories affected, you can even run:

chown -R root:root /path/to/jail

chown jaileduser:group /path/to/jail/path/to/home

 

Olivier

 

On 11-11-2020 23:02, Bob Schuon wrote:

Hi,

 

We are running ISPConfig, and one of the jails (webxxx) somehow is owned by the jailed user, rather than root:root.  We thought there was a way to fix this, but we can’t seem to find the documentation for it online.  Would anyone know how to do this?

 

Basically, we /think/ the sequence was:

Change a bit in the chroot to make it no longer a chroot (or be able to edit it). 
Fix the folder ownership.
Reset the bit to lock the jail again.

Does that sound familiar to anyone?

 

Thanks!

 listinfo/jailkit-users

 

 

_______________________________________________
Jailkit-users mailing list
Jailkit-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/jailkit-users

_______________________________________________
Jailkit-users mailing list
Jailkit-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/jailkit-users