From owner-freebsd-questions Fri Apr 6 1:39:39 2001 Delivered-To: freebsd-questions@freebsd.org Received: from guru.mired.org (okc-65-26-235-186.mmcable.com [65.26.235.186]) by hub.freebsd.org (Postfix) with SMTP id ABBE637B443 for ; Fri, 6 Apr 2001 01:39:37 -0700 (PDT) (envelope-from mwm@mired.org) Received: (qmail 70123 invoked by uid 100); 6 Apr 2001 08:39:36 -0000 From: Mike Meyer MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15053.32968.480168.299338@guru.mired.org> Date: Fri, 6 Apr 2001 03:39:36 -0500 To: "Jeff Leslie" Cc: questions@freebsd.org Subject: locking out users (was [none]) In-Reply-To: <36504199@toto.iv> X-Mailer: VM 6.90 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`;h9L,Yg`+vb1>RG% *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Jeff Leslie types: > how do set my permissions such that it will NOT let users besides root to > traverse outside of /usr/home. thanks First, please provide a subject line. It makes it more likely you'll get answers. You can't do what you describe with just permissions. By setting other things - for instance, providing a different shell - you can do that. The simple shell to use is /dev/null. The users won't be able to log in after you do that, but since the system would be useless under the conditions you describe anyway, that's not a major loss. If you want your users to be able to do something after they log in, how you lock them out of other things depends on what you want them to be able to do. Knowing more about what you don't want them to do might help, as well. The most flexible method is to put them in a jail (see the man page), but there might be easier - and more efficient - solutions for the particular case you have in mind. http://www.mired.org/home/mwm/ Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message