Re: ssh - restricted shell
From: daniel (danstemporaryaccount_at_yahoo.ca)
Date: 03/30/05
- Previous message: Josh Ockert: "Re: Mount a tar archive?"
- In reply to: Duane Winner: "ssh - restricted shell"
- Next in thread: daniel: "Re: ssh - restricted shell"
- Reply: daniel: "Re: ssh - restricted shell"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
To: freebsd-questions@freebsd.org Date: Wed, 30 Mar 2005 16:51:15 -0500
On March 30, 2005 04:02 pm, Duane Winner wrote:
> Hello,
>
> Does anybody know the best technique to accomplish this:
>
> We have a server that we use for mostly internal development, and run an
> SSH server.
>
> We have an outsider who we want to allow to ssh into this server and do
> some work.
>
> However, because he is an outsider, we don't want him roaming around our
> server, moving, looking, doing, or anything outside of his own home
> directory.
>
> How can I restrict him to his own home directory?
>
> I thought I ran into instructions once for doing this, but I can't find
> anything right now.
>
> Or was I thinking of scponly ?
>
> That might do it, except we do need to set him up to to run some scripts
> within his home directory after he uploads stuff via scp.
if you only want scp to work, then you can use this as the shell:
/usr/lib/misc/sftp-server
worked for me. however, if they need a shell, you'll have to chroot() the
shell and i don't know how to do that. i've never bothered to learn 'cause
i've heard that they're easy to break out of anyway.
-- the reasonable man adapts himself to the world; the unreasonable man persists in trying to adapt the world to himself. therefore, all progress depends on the unreasonable man. - george bernard shaw _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
- Previous message: Josh Ockert: "Re: Mount a tar archive?"
- In reply to: Duane Winner: "ssh - restricted shell"
- Next in thread: daniel: "Re: ssh - restricted shell"
- Reply: daniel: "Re: ssh - restricted shell"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
|
