Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Mar 2005 23:19:42 +0200
From:      Roland Smith <rsmith@xs4all.nl>
To:        freebsd-questions@freebsd.org
Cc:        Duane Winner <dwinner-lists@att.net>
Subject:   Re: ssh - restricted shell
Message-ID:  <20050330211942.GA67468@slackbox.xs4all.nl>
In-Reply-To: <424B13EF.6050400@att.net>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
On Wed, Mar 30, 2005 at 04:02:39PM -0500, Duane Winner wrote:
> Hello,
> 
> Does anybody know the best technique to accomplish this:
> 
> We have a server that we use for mostly internal development, and run an 
> SSH server.
> 
> We have an outsider who we want to allow to ssh into this server and do 
> some work.
> 
> However, because he is an outsider, we don't want him roaming around our 
> server, moving, looking, doing, or anything outside of his own home 
> directory.
> 
> How can I restrict him to his own home directory?

You could try using 'bash -r' as the shell for this user. The -r option
puts bash in "restricted" mode. See bash(1).

Roland
-- 
R.F. Smith                           /"\    ASCII Ribbon Campaign
r s m i t h @ x s 4 a l l . n l      \ /    No HTML/RTF in e-mail
http://www.xs4all.nl/~rsmith/         X     No Word docs in e-mail
public key: http://www.keyserver.net / \    Respect for open standards

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCSxfuEnfvsMMhpyURAiUaAJ9yLBJa7pWhu/3uK9KiiWvzPIuZiwCeOfsP
R870erIUcpcjxsjrvgRhP58=
=yGXg
-----END PGP SIGNATURE-----
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050330211942.GA67468>