1 |
You could try setting up ssh in a chroot environment. See |
2 |
http://chrootssh.sourceforge.net/index.php for more information. |
3 |
Regards, |
4 |
-John |
5 |
|
6 |
John Barton |
7 |
Specialized Tech Solutions, LLC |
8 |
Server+, Security+, Network+, Linux+ Certified |
9 |
jbarton@××××××××××××××.net |
10 |
|
11 |
> So I'm slowly getting my gentoo server in shape... and adding my first |
12 |
> virtual host client (heh, my cousin's DJ business website). I've set up |
13 |
> a vhost mapping in apache for her doc root and I've added her domain to |
14 |
> vpopmail. All is going well... |
15 |
> |
16 |
> Except, it has occured to me that I would like to give her ssh/sftp |
17 |
> access (I don't want to be making changes for her every other day). I've |
18 |
> set up a user on the machine, but it makes me a little nervous. Not that |
19 |
> I'm worried about my cousin, but she's been known to give her password |
20 |
> to techie friends so that they can "help". |
21 |
> |
22 |
> So, my question is, is there a way to restrict her user's movements in |
23 |
> the file system? It would be nice if she were only able to work within |
24 |
> her home directory. |
25 |
> |
26 |
> When I log into my account with my old hosting company, I can cd up to |
27 |
> "/", but it's obviously not the machine's "/"... there's only about ten |
28 |
> commands under /bin and only our users under /home. Is this a UML setup? |
29 |
> Is there some other way to restrict movement? |
30 |
> |
31 |
> Or maybe I should start making all sensitive files chown root and chmod |
32 |
> 700? |
33 |
> |
34 |
> Any all thoughts much appreciated... |
35 |
> |
36 |
> Ben |
37 |
> |
38 |
> |