From owner-freebsd-questions@FreeBSD.ORG Mon Apr 25 17:45:44 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 12AF316A4CE for ; Mon, 25 Apr 2005 17:45:44 +0000 (GMT) Received: from mail24.sea5.speakeasy.net (mail24.sea5.speakeasy.net [69.17.117.26]) by mx1.FreeBSD.org (Postfix) with ESMTP id D8CC843D5D for ; Mon, 25 Apr 2005 17:45:43 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 30849 invoked from network); 25 Apr 2005 17:45:43 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail24.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 25 Apr 2005 17:45:43 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 78D132F; Mon, 25 Apr 2005 13:45:42 -0400 (EDT) Sender: lowell@be-well.ilk.org To: freebsd-questions@freebsd.org, Olaf Stein References: <200504251451.j3PEp0Wl011657@defang9.net.ohio-state.edu> <20050425163410.GE98448@slackbox.xs4all.nl> From: Lowell Gilbert Date: 25 Apr 2005 13:45:42 -0400 In-Reply-To: <20050425163410.GE98448@slackbox.xs4all.nl> Message-ID: <44hdhuzr5l.fsf@be-well.ilk.org> Lines: 11 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: Re: lock user to home directory X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Apr 2005 17:45:44 -0000 Roland Smith writes: > On Mon, Apr 25, 2005 at 10:51:00AM -0400, Olaf Stein wrote: > > hi everybody > > > > is there an easy way to lock a user to his home directory?? > > Try giving them restricted bash (rbash, or bash -r) as shell. Assuming you trust them not to actively try to attack your box, in which case you would use a chroot(8) or jail(8).