Very Computer

by **Nick** » Tue, 03 Jul 2001 03:12:52

Hi,
How can I ensure that when a user logs in using ssh that he/she is unable to
see no higher than that users home dir ?
Can anyone recommend good reading on filesystem security.
TIA
Nick.

by **Christian Garm** » Tue, 03 Jul 2001 17:25:57

> How can I ensure that when a user logs in using ssh that he/she is unable to
> see no higher than that users home dir ?

man chroot

--
regards,

by **topdo** » Tue, 03 Jul 2001 20:29:25

> > How can I ensure that when a user logs in using ssh that he/she is unable to
> > see no higher than that users home dir ?

> man chroot

> --
> regards,

chroot is not really going to do what you want as if your users are sshing in
you will have to copy all apps and scripts and data that the users would need
inside the chrooted filesystem as nothing below the chroot will be accessable at
all

chroot is good for ftp as there is generally a very limited number of actions
they can do and the data is in a single location.

if you don't want your users seeing configuration files you should be able to
manipulate the file permissions to not give away anything important

regards

Dav....

by **Nick** » Wed, 04 Jul 2001 07:05:16

Hi,
Ftp on SSH is all I require, so thanks, I guess I can do it without much
problem.
Thanks
Nick.

> > > How can I ensure that when a user logs in using ssh that he/she is
unable to
> > > see no higher than that users home dir ?

> > man chroot

> > --
> > regards,

> chroot is not really going to do what you want as if your users are sshing
in
> you will have to copy all apps and scripts and data that the users would
need
> inside the chrooted filesystem as nothing below the chroot will be
accessable at
> all

> chroot is good for ftp as there is generally a very limited number of
actions
> they can do and the data is in a single location.

> if you don't want your users seeing configuration files you should be able
to
> manipulate the file permissions to not give away anything important

> regards

> Dav....

Very Computer

Stop user seeing rest of filesystem

Stop user seeing rest of filesystem

Stop user seeing rest of filesystem

Stop user seeing rest of filesystem

Stop user seeing rest of filesystem