From owner-freebsd-questions@FreeBSD.ORG  Fri Oct 15 22:50:54 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6C93316A4CE
	for <freebsd-questions@freebsd.org>;
	Fri, 15 Oct 2004 22:50:54 +0000 (GMT)
Received: from mhc.ab.ca (ns.mhc.ab.ca [192.139.34.1])
	by mx1.FreeBSD.org (Postfix) with ESMTP id F30E543D67
	for <freebsd-questions@freebsd.org>;
	Fri, 15 Oct 2004 22:50:53 +0000 (GMT)
	(envelope-from gcooper@mhc.ab.ca)
Received: by gate.mhc.ab.ca id <328355>; Fri, 15 Oct 2004 16:50:46 -0600
From: "Grant Cooper" <gcooper@mhc.ab.ca>
To: <freebsd-questions@freebsd.org>
Date: Fri, 15 Oct 2004 16:52:32 -0600
Message-Id: <04Oct15.165046mdt.328355@gate.mhc.ab.ca>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Importance: Normal
X-OriginalArrivalTime: 15 Oct 2004 22:52:33.0656 (UTC)
	FILETIME=[A884A780:01C4B309]
Subject: locking down a users privileges
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: gcooper@mhc.ab.ca
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Oct 2004 22:50:54 -0000

I am trying to prevent a user from leaving his directory. I set something up
last year where I just added a name to a file. But I forgot the name of the
file.

For another box I wanted to use putty to connect to my freebsd server and
was wondering if there was a shell I could use where the user couldn't do
anything in his account. Only want the user to be able to login and use the
mysql program.

Should I use jail or chroot or something else?