Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Lock down a user to just their home directroy

Posted on 2004-05-02
4
Medium Priority
?
346 Views
Last Modified: 2013-12-16

I have a group of people that I want to have read/write access to a directory.  They are windows users that will be useing the winscp software to download pictures of homes.  

I want to limit them to just that one directory.  They are currenty a memeber of the "user's" group and have a shell of /bin/bash.

Should I change the shell to nothing? Should I create a new group and not give them rights to anything.  Should I to a changeroot jail.

I do not want anybody deleting any of my system files and I do not want them viewing any images on my system that were not intended for them to view.

Winscp is working NOW so I would like to get this fixed before someone gets curious

timfox123
0
Comment
Question by:TIMFOX123
  • 2
  • 2
4 Comments
 
LVL 38

Accepted Solution

by:
yuzh earned 2000 total points
ID: 10974065
You can setup "chroot login" to do the job, have a look at the following doc to get some
idea about how to set it up:

http://www.tjw.org/chroot-login-HOWTO/

also have a look at:

http://chrootssh.sourceforge.net/index.php
0
 

Author Comment

by:TIMFOX123
ID: 10974421
I am reviewing this.  It appears scponly is a grand tool for his and I am evaluating this.  

Any commnents on scponly ?

Dave
0
 
LVL 38

Expert Comment

by:yuzh
ID: 10974893
Here's another example of chroot login setup:

http://www.kegel.com/crosstool/current/doc/chroot-login-howto.html
0
 

Author Comment

by:TIMFOX123
ID: 10991861
scponly really ROCKS !!!!

I have a passworded share and the windows users use a gui winscp to drag/drop to my share.  They are change root jailed so they can not mess with my other files.   Easy safe secure (ish).  

This was so much easier than making a jail, you just typed in the make jail and it made a change root jail.  

Wahhooo, I am happy.  Now the other people in the Home Owners Association do not think I am a moron (untill another day).

Dave
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction We as admins face situation where we need to redirect websites to another. This may be required as a part of an upgrade keeping the old URL but website should be served from new URL. This document would brief you on different ways ca…
Fine Tune your automatic Updates for Ubuntu / Debian
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.
Suggested Courses
Course of the Month15 days, 7 hours left to enroll

575 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question