Re: [gentoo-server] users of virtual domains

[John Barton]

You could try setting up ssh in a chroot environment. See
http://chrootssh.sourceforge.net/index.php for more information.
Regards,
-John

John Barton
Specialized Tech Solutions, LLC
Server+, Security+, Network+, Linux+ Certified
jbarton@××××××××××××××.net

> So I'm slowly getting my gentoo server in shape... and adding my first
> virtual host client (heh, my cousin's DJ business website). I've set up
> a vhost mapping in apache for her doc root and I've added her domain to
> vpopmail. All is going well...
>
> Except, it has occured to me that I would like to give her ssh/sftp
> access (I don't want to be making changes for her every other day). I've
> set up a user on the machine, but it makes me a little nervous. Not that
> I'm worried about my cousin, but she's been known to give her password
> to techie friends so that they can "help".
>
> So, my question is, is there a way to restrict her user's movements in
> the file system? It would be nice if she were only able to work within
> her home directory.
>
> When I log into my account with my old hosting company, I can cd up to
> "/", but it's obviously not the machine's "/"... there's only about ten
> commands under /bin and only our users under /home. Is this a UML setup?
> Is there some other way to restrict movement?
>
> Or maybe I should start making all sensitive files chown root and chmod
> 700?
>
> Any all thoughts much appreciated...
>
> Ben
>
>