OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Baldur Gislason (baldur_at_foo.is)
Date: Thu Aug 15 2002 - 13:58:54 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    /usr/ports/security/ssh2 has that feature built in, it can chroot certain
    users or users that are members of certain groups.

    Baldur

    On Thursday 15 August 2002 13:43, you wrote:
    > Hi guys -
    >
    > I'm in the process of setting up a form of fileserver, and I'd like for my
    > users to be able to work only in their home directories, not anywhere else.
    > I would like to use SSH for the connections, as opposed to FTP, but I
    > don't want users to be able to log into an interactive shell (only
    > SCP/SFTP) and I don't want them to 'escape' out of their home directories.
    >
    > Anyone have any ideas on how I'd go about doing this? I've been fiddling
    > with chrsh (a 'chroot shell') but it's not really what I want.
    >
    > (I was debating with myself whether to post this on -questions of
    > -security, I hope I chose wisely in the end).
    >
    > Thanks!
    >
    > - Philip

    To Unsubscribe: send mail to majordomoFreeBSD.org
    with "unsubscribe freebsd-security" in the body of the message