Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Apr 2007 22:37:51 -0700
From:      Garrett Cooper <youshi10@u.washington.edu>
To:        freebsd-questions@freebsd.org
Subject:   Re: limited shell access
Message-ID:  <4632DDAF.9060306@u.washington.edu>
In-Reply-To: <64888.68.165.89.71.1177720739.squirrel@mail.el.net>
References:  <63405.68.165.89.71.1177651193.squirrel@mail.el.net> <64888.68.165.89.71.1177720739.squirrel@mail.el.net>

next in thread | previous in thread | raw e-mail | index | archive | help
kalin mintchev wrote:
>> hi all..
>>
>> is it possible to limit access for certain users only to a certain
>> directory tree - other then his/her home directory?
> 
> so...  can i do that or not?
> 
> 
> 
>> for example joe logs into his home directory where there is a symbolic
>> link to some other directory on the system but he can not go up a level
>> (to /home or / ) or anywhere else but home and the directory under the
>> symlink...
>>
>> i looked at the ssh and sshd confs but apparently nothing there...  still
>> looking...
>>
>> thanks....

Yes, things like this can be done, but it involves a) making jails, b) 
limiting (limit.conf(8)) accounts, and c) setting up proper permissions 
so the user can write to all of the required files in their directory 
(.profile, .ssh/, etc at least). A lot of work if you ask me ... :).

-Garrett



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4632DDAF.9060306>