Home / server / Questions / 582415
Accepted
shgnInc
Asked: 2014-03-17 03:14:31 +0800 CST

"500 OOPS: vsftpd: refusing to run with writable root inside chroot()" - login failed on Debian

  • 772

I installed vsFTPd for running an FTP server on Debian 7.3 (Wheezy). I checked the vsFTPd version was 2.3.5, and I configured it like so:

listen=YES
local_enable=YES
write_enable=YES
chroot_local_user=YES
pasv_min_port=15000
pasv_max_port=15200
allow_writeable_chroot=YES

I followed these articles for solving this problem:

And many others on Google and forums, but my problem was not solved.

NOTE: I have solved this problem on Ubuntu 12.04 (Precise Pangolin), but that solution does not work on Debian 7.3.

I really mixed up on it?!

linux

3 Answers

  1. Best Answer

    I searched for it toooooooooo much, and I really mixed up, so I decided to change vsFTPd to SFTP or something else, till I found a link about this bug.

    Then I found out this problem was solved in vsFTPd version 3. So I searched how to upgrade it and could find to add the jessie repository to my Debian 7.3 installation and upgrade it so:

    echo "deb http://ftp.us.debian.org/debian jessie main contrib non-free" >> /etc/apt/sources.list
aptitude update
aptitude upgrade vsftpd
echo "allow_writeable_chroot=YES" >> /etc/vsftpd.conf
service vsftpd restart

    Now it works correctly for me.

    • 9

  2. Just add

    seccomp_sandbox=NO

    to the configuration and restart the service with service vsftpd restart

    Then "allow_writeable_chroot=YES" will work also with newer vsFTPd versions (found in 500 OOPS: vsftpd: refusing to run with writable root inside chroot() Keep user jailed).

    • 2

  3. From the default vsftpd.conf:

    Warning! chroot'ing can be very dangerous. If using chroot, make sure that the user does not have write access to the top level directory within the chroot

    That's why your solution should not involve allow_writeable_chroot=YES when applicable. Instead, refactor your filesystem in order to avoid writable FTP top level directories.

    • 0