Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 May 2004 15:10:16 +0200
From:      Frankye - ML <listsucker@ipv5.net>
To:        freebsd-security@freebsd.org
Subject:   Re: Multi-User Security
Message-ID:  <20040517151016.7b83fbe9@godzilla>
In-Reply-To: <4985.217.162.71.141.1084795720.squirrel@serv04.inetworx.ch>
References:  <4985.217.162.71.141.1084795720.squirrel@serv04.inetworx.ch>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 17 May 2004 14:08:40 +0200 (CEST)
"David E. Meier" <dev@eth0.ch> wrote:

| We would like to offer to some customers of ours some sort of network
| backup/archive. They would put daily or weekly backups from their local
| machine on our server using rsync and SSH. Therefore, they all have a
| user account on our server. However, we must ensure that they would
| absolutely not be able to access any data of each other at all.

Just my 2 cents: I've found very useful some shells that permits just some
subset of commands, for example shells/scponly, sysutils/bksh or
sendmail's smrsh.

Since you're using ssh you might also find useful the command= statement
in .ssh/authorized_keys

HTH

Frankye
 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040517151016.7b83fbe9>