Solved

Lock down a user to just their home directroy

Posted on 2004-05-02
4
342 Views
Last Modified: 2013-12-16

I have a group of people that I want to have read/write access to a directory.  They are windows users that will be useing the winscp software to download pictures of homes.  

I want to limit them to just that one directory.  They are currenty a memeber of the "user's" group and have a shell of /bin/bash.

Should I change the shell to nothing? Should I create a new group and not give them rights to anything.  Should I to a changeroot jail.

I do not want anybody deleting any of my system files and I do not want them viewing any images on my system that were not intended for them to view.

Winscp is working NOW so I would like to get this fixed before someone gets curious

timfox123
0
Comment
Question by:TIMFOX123
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 38

Accepted Solution

by:
yuzh earned 500 total points
ID: 10974065
You can setup "chroot login" to do the job, have a look at the following doc to get some
idea about how to set it up:

http://www.tjw.org/chroot-login-HOWTO/

also have a look at:

http://chrootssh.sourceforge.net/index.php
0
 

Author Comment

by:TIMFOX123
ID: 10974421
I am reviewing this.  It appears scponly is a grand tool for his and I am evaluating this.  

Any commnents on scponly ?

Dave
0
 
LVL 38

Expert Comment

by:yuzh
ID: 10974893
Here's another example of chroot login setup:

http://www.kegel.com/crosstool/current/doc/chroot-login-howto.html
0
 

Author Comment

by:TIMFOX123
ID: 10991861
scponly really ROCKS !!!!

I have a passworded share and the windows users use a gui winscp to drag/drop to my share.  They are change root jailed so they can not mess with my other files.   Easy safe secure (ish).  

This was so much easier than making a jail, you just typed in the make jail and it made a change root jail.  

Wahhooo, I am happy.  Now the other people in the Home Owners Association do not think I am a moron (untill another day).

Dave
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Network Interface Card (NIC) bonding, also known as link aggregation, NIC teaming and trunking, is an important concept to understand and implement in any environment where high availability is of concern. Using this feature, a server administrator …
rdate is a Linux command and the network time protocol for immediate date and time setup from another machine. The clocks are synchronized by entering rdate with the -s switch (command without switch just checks the time but does not set anything). …
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question