Re: ssh - restricted shell
From: Roland Smith (rsmith_at_xs4all.nl)
Date: 03/30/05
- Previous message: Miguel Mendez: "Re: Sound Editors"
- In reply to: Duane Winner: "ssh - restricted shell"
- Next in thread: wizlayer: "Re: ssh - restricted shell"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Wed, 30 Mar 2005 23:19:42 +0200 To: freebsd-questions@freebsd.org
On Wed, Mar 30, 2005 at 04:02:39PM -0500, Duane Winner wrote:
> Hello,
>
> Does anybody know the best technique to accomplish this:
>
> We have a server that we use for mostly internal development, and run an
> SSH server.
>
> We have an outsider who we want to allow to ssh into this server and do
> some work.
>
> However, because he is an outsider, we don't want him roaming around our
> server, moving, looking, doing, or anything outside of his own home
> directory.
>
> How can I restrict him to his own home directory?
You could try using 'bash -r' as the shell for this user. The -r option
puts bash in "restricted" mode. See bash(1).
Roland
-- R.F. Smith /"\ ASCII Ribbon Campaign r s m i t h @ x s 4 a l l . n l \ / No HTML/RTF in e-mail http://www.xs4all.nl/~rsmith/ X No Word docs in e-mail public key: http://www.keyserver.net / \ Respect for open standards
- application/pgp-signature attachment: stored
- Previous message: Miguel Mendez: "Re: Sound Editors"
- In reply to: Duane Winner: "ssh - restricted shell"
- Next in thread: wizlayer: "Re: ssh - restricted shell"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
- RE: Binding Windows Services to Specific Addresses Only
... Document the server. ... If this is a corporate environment, ...
Install the minimums. ... The network configuration for the server should restrict
what the server has ... (Focus-Microsoft) - Re: notrust alternative?
... There is a fundamental misunderstanding of the notrust option, understandable because
the documentation is buggy. ... The notrust option applies to clients attempting to retrieve time
from your server. ... What you want is the nopeer option, which prevents broadcast, manycast
and symmetric peers to mobilize associations and potentially synchronize your clock. ...
restrict default kod nomodify notrap nopeer noquery ... (comp.protocols.time.ntp) - Re: Not able to connect
... server 0.pool.ntp.org ... You may wish to restrict the pool to your geographic
area. ... restrict 1.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery ...
(comp.protocols.time.ntp) - Re: Time server...how to set it up on FC1?
... Network Time Protocol is different from the "time" ... I suggest that you set
up ntpd on your server. ... would set this to "restrict default ignore" and then
allow access for your ... # Permit time synchronization with our time source, ...
(Fedora) - Re: FC4 NTPD problem
... restrict default nomodify notrap noquery ... # restrict 192.168.1.0 mask
255.255.255.0 nomodify notrap ... server 0.pool.ntp.org ... (Fedora)