Re: [Jailkit-users] Jailing existing users

[Olivier Sessink]

do you use jk_lsh inside the jail? How is it configured?

what does /data01/mco/custdata/etc/jailkit/jk_lsh.ini look like?

did you enable logging inside the jail? that might help.

Olivier


On 22-08-18 10:53, nash oudha wrote:

Thanks Olivier

it seem the issue is related to sshd.  will have to try to figure out what cause this

Aug 22 09:49:25 sftpsrv jk_chrootsh[9245]: now entering jail /data01/mco/custdata for user test800 (55675) with arguments -c /usr/libexec/openssh/sft
Aug 22 09:49:25 sftpsrv sshd[9244]: Received disconnect from 192.168.122.1 port 39162:11: disconnected by user
Aug 22 09:49:25 sftpsrv sshd[9244]: Disconnected from 192.168.122.1 port 39162
Aug 22 09:49:25 sftpsrv sshd[9240]: pam_unix(sshd:session): session closed for user test800
Aug 22 09:49:25 sftpsrv systemd-logind[638]: Removed session 375.
Aug 22 09:49:25 sftpsrv systemd[1]: Removed slice User Slice of test800.
Aug 22 09:49:25 sftpsrv systemd[1]: Stopping User Slice of test800.

On Tue, Aug 21, 2018 at 9:27 PM Olivier Sessink <address@hidden> wrote:

On 21-08-18 13:30, nash oudha wrote:

in journactl

Aug 21 12:19:17 sftpsrv jk_chrootsh[6499]: abort, effective user ID is not 0, possibly jk_chrootsh is not setuid root

jk_chrootsh seems to be installed without setuid root

chmod 4755 /usr/sbin/jk_chrootsh

will fix that

Olivier

-- 
Bluefish website http://bluefish.openoffice.nl/
Blog http://oli4444.wordpress.com/

_______________________________________________
Jailkit-users mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/jailkit-users

_______________________________________________
Jailkit-users mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/jailkit-users

-- 
Bluefish website http://bluefish.openoffice.nl/
Blog http://oli4444.wordpress.com/