Security Warning SSH not CHROOTED!

Discussion in 'Installation/Configuration' started by vaio1, Mar 18, 2010.

  1. vaio1

    vaio1 Member

    Hi guys only now I have discovered that all the users who connect themselves by a SSH client to the server can see all the system folders!

    How is it possible? :eek: :eek:

    Is there a way to set a Jail to it? The server is in production mode!

    thanks
     
    vaio1, Mar 18, 2010
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    By default, SSH accounts are never chrooted. Personally I wont give users SSH access if it is not absolutely nescessary.

    Have you patched your SSH daemon to support chrooting for ispconfig 2?
     
    till, Mar 19, 2010
    #2
  3. vaio1

    vaio1 Member

    Hi again Till, I have followed the setup tutorial in this website and I have not found any ssh patch section. Please, can u tell me what have I do?

    thanks again
     
    vaio1, Mar 19, 2010
    #3
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Which Linux distribution?
     
    till, Mar 19, 2010
    #4
  5. vaio1

    vaio1 Member

    We have the Centos 5 installed.
     
    vaio1, Mar 19, 2010
    #5
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    till, Mar 19, 2010
    #6
  7. vaio1

    vaio1 Member

    Already tested but without success. :(
     
    vaio1, Mar 19, 2010
    #7
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    And you created a new SSH user for testing?
     
    till, Mar 19, 2010
    #8
  9. vaio1

    vaio1 Member

    I have enabled a user by the ISPConfig panel. is it sufficient?
     
    vaio1, Mar 19, 2010
    #9

Share This Page