Re: [Jailkit-users] pam_unix(sshd:session): session closed for user

[Olivier Sessink]

Igor Galić wrote:
> Hi folks,
> 
> Today I've been evaluating a couple of methods of chrooting scp/sftp users,
> and it seems that jk_chrootsh is so far the sanest.
> 
> I didn't like the fact that jk_chrootsh was chrooted, so I gave it 
> SYS_CAP_CHROOT:
> % sudo setcap CAP_SYS_CHROOT=ep /opt/bw/sbin/jk_chrootsh
> % sudo chmod -s /opt/bw/sbin/jk_chrootsh
> 
> Of course that wouldn't work:
> jk_chrootsh[25029]: abort, effective user ID is not 0, possibly jk_chrootsh 
> is not setuid root
> 
> Welcome to 2009....

in cvs is initial capability support for jk_chrootsh. Could you give
that a try and test if it works as expected?

Olivier