From owner-freebsd-questions@FreeBSD.ORG  Thu Mar  3 01:01:23 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 17C7416A4CE
	for <questions@freebsd.org>; Thu,  3 Mar 2005 01:01:23 +0000 (GMT)
Received: from ns1.tiadon.com (SMTP.tiadon.com [69.27.132.161])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 65EE143D53
	for <questions@freebsd.org>; Thu,  3 Mar 2005 01:01:20 +0000 (GMT)
	(envelope-from kdk@daleco.biz)
Received: from [69.27.131.0] ([69.27.131.0]) by ns1.tiadon.com with Microsoft
	SMTPSVC(6.0.3790.211);	 Wed, 2 Mar 2005 19:02:36 -0600
Message-ID: <422661DD.1010909@daleco.biz>
Date: Wed, 02 Mar 2005 19:01:17 -0600
From: Kevin Kinsey <kdk@daleco.biz>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.3) Gecko/20041210
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Nick Pavlica <linicks@gmail.com>
References: <20050301122927.C1E464BDAA@ws1-1.us4.outblaze.com>
	<42246D72.2020504@landgren.net>	 <dc9ba0440503020901273e6357@mail.gmail.com>
	<20050302183758.N25321@mail.rot-1.de>
	<dc9ba04405030216171531c783@mail.gmail.com>
In-Reply-To: <dc9ba04405030216171531c783@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 03 Mar 2005 01:02:36.0638 (UTC)
	FILETIME=[B076B7E0:01C51F8C]
cc: Stevan Tiefert <stevan@rot-1.de>
cc: questions@freebsd.org
Subject: Re: Default security: other users can ACCESS MY HOMEDIR?!
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Mar 2005 01:01:23 -0000

Nick Pavlica wrote:

>I was thinking along the lines of a scp server that would only allow
>the user to browse only there directories.
>
>
>On Wed, 2 Mar 2005 18:39:43 +0100 (CET), Stevan Tiefert <stevan@rot-1.de> wrote:
>  
>
>>On Wed, 2 Mar 2005, Nick Pavlica wrote:
>>
>>    
>>
>>>How would you restrict regular users from accessing any part of the
>>>file system accept there home dirs?  Is this even possible?
>>>
>>>      
>>>
>>Hello Nick,
>>
>>it is possible but why? The user must be able to access their shells,
>>configurations and so on!
>>
>>With regards
>>Stevan Tiefert
>>    
>>

You might look at MAC (Chapter 15 of the handbook).  I don't
grok it yet, so I can't say if it's exactly what you need.  It could
be a lot more ...

Kevin Kinsey