From owner-freebsd-questions@FreeBSD.ORG Thu Mar 3 00:54:04 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2A07716A4CE for ; Thu, 3 Mar 2005 00:54:04 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.203]) by mx1.FreeBSD.org (Postfix) with ESMTP id B012A43D46 for ; Thu, 3 Mar 2005 00:54:03 +0000 (GMT) (envelope-from nomadlogic@gmail.com) Received: by rproxy.gmail.com with SMTP id j1so259197rnf for ; Wed, 02 Mar 2005 16:54:03 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=G/nYhK3oW3AI85SN2nacSeT0iJZGOfsw9fTlW60BnJGXrw8CWDLstzn7ES01vWViSsjUpuDMexDTnTOngynw5w9EedNH3FxeYqmfqZEOrwTmZx9JFfESVEMUy1d0CLhQb2VH9u4AgloMH5zMeqYywhYTx6NpiloD3Q9jNOWu2TI= Received: by 10.38.78.48 with SMTP id a48mr77514rnb; Wed, 02 Mar 2005 16:53:31 -0800 (PST) Received: by 10.38.14.51 with HTTP; Wed, 2 Mar 2005 16:53:31 -0800 (PST) Message-ID: <57d7100005030216533a439328@mail.gmail.com> Date: Wed, 2 Mar 2005 16:53:31 -0800 From: pete wright To: Nick Pavlica In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <20050301122927.C1E464BDAA@ws1-1.us4.outblaze.com> <42246D72.2020504@landgren.net> <20050302183758.N25321@mail.rot-1.de> cc: Stevan Tiefert cc: questions@freebsd.org Subject: Re: Default security: other users can ACCESS MY HOMEDIR?! X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: pete wright List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2005 00:54:04 -0000 On Wed, 2 Mar 2005 17:17:32 -0700, Nick Pavlica wrote: > I was thinking along the lines of a scp server that would only allow > the user to browse only there directories. > > there are a couple way's to do this, i *think* you could chroot the sshd process per user thus locking them in that environment. or you could setup a jail for each user which achieves similar results. i've gone the chroot route with proftpd, which worked fine...altho i'm not sure about doing it with sshd.... -p -- ~~o0OO0o~~ Pete Wright www.nycbug.org NYC's *BSD User Group