[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Any HOWTOs for setting up a chroot jail for ssh users?



On Wed, Feb 13, 2002 at 01:48:41PM +0100, Allan wrote:
| Am Mon, Jan 28, 2002 at 12:44:26PM -0800, schrieb Kaelin Colclasure:
| > I need to put a small subset of user accounts into this jail, and restrict
| > them to a small set of commands (primarily rsync via ssh transport, plus the
| > basic file management stuff in their own home directories).
| 
| For those jailed users it should be possible to copy and execute binaries 
| in their home directories.  You can not really restrict what programs they
| can run. 

You could mount your fs with noexec (see mount(8)), restricting all
execution of uploaded binaries.

Just my 0.02 euros,

Paul 'WEiRD' de Weerd

-- 
>++++++++[<++++++++++>-]<+++++++.>+++[<------>-]<.>+++[<+
+++++++++++>-]<.>++[<------------>-]<+.--------------.[-]