Displaying 3 results from an estimated 3 matches for "ssh_chroot_full_access".
2017 Jan 11
1
Trouble removing files in chrooted sftp
...ld try turning this off and see if
your problem goes away.
setenforce 0
If SELinux is the issue then I strongly advice that you use existing
SELinux Booleans or create your own local policy rather than turning
SELinux off, or leaving your system in permissive mode.
# getsebool -a | grep chroot
ssh_chroot_full_access --> off
ssh_chroot_manage_apache_content --> off
ssh_chroot_rw_homedirs --> off
https://wiki.centos.org/HowTos/SELinux may also help.
If it is SELinux related I would also look at installing setroubleshoot and
setroubleshoot-server.
I hope this helps :)
2015 Jul 09
3
C-6.6 - sshd_config chroot SELinux issues
...ser_home_t:chr_file { read write };
#!!!! This avc is allowed in the current policy
allow chroot_user_t xauth_exec_t:file getattr;
#============= xauth_t ==============
allow xauth_t chroot_user_t:process sigchld;
# getsebool -a | grep ssh
allow_ssh_keysign --> off
fenced_can_ssh --> off
ssh_chroot_full_access --> on
ssh_chroot_manage_apache_content --> off
ssh_chroot_rw_homedirs --> on
ssh_sysadm_login --> off
These are definitely involved with the X11 forwarding issue because if
I use: setenforce Permissive then gvim works for a chrooted session.
However, when setenforce Enforcing is set t...
2017 Jan 09
2
Trouble removing files in chrooted sftp
Hi,
I have trouble setting up chrooted SFTP for our user.
I got the basic SFTP chroot working, user is chrooted to its home
directory, I've added /home/userb/etc directory with dummy passwd, group
and localtime files.
The problem is that instead of only accessing its own files, I need the
user to be able to remove another users files.
I have web application which runs as different user, the