Z

MUST HAVE: Chrooted SSH User Access for Shell-client

Hi team, 

Would you seriously consider adding this to your development roadmap fast? 

This feature would significantly enhance ISPmanager's security and competitiveness in the shared hosting market.

With your Shell-client I'm able to navigate almost the entire system and do so many things from navigating almost every directory (except /root), to viewing and editing files, it's unbelievable!

Feature Request: Implement Chrooted SSH/Jailed Shell Access

Current Situation: ISPmanager currently provides standard SSH access to users, but lacks built-in chrooted SSH functionality that restricts users to their home directories. This creates security concerns in shared hosting environments where users can view system files and other users' directory structures and even system files 

Business Need: Modern shared hosting requires secure SSH access that allows developers to use essential tools (composer, git, npm, etc.) while maintaining strict isolation. Competitors like cPanel (VirtFS Jailed Shell) and Plesk ("/bin/bash chrooted") already offer this as standard features.

Requested Feature:

  • Chrooted SSH option in user account settings (Enable/Disable toggle)
  • Automatic jail environment setup with essential binaries and libraries
  • Pre-configured sections for common development tools (PHP, Node.js, Git, Composer)
  • Template-based jail configuration for different user types/packages
  • Easy management interface for adding/removing tools from jails

Security Benefits:

  • Users restricted to home directory only
  • Cannot access system files or other users' data
  • Maintains development functionality while enhancing security
  • Reduces risk of privilege escalation attacks
  • Essential for PCI compliance and security audits

28.06.2025 04:50

1