From owner-freebsd-questions  Mon Aug 20 19:24:55 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mail7.nc.rr.com (fe7.southeast.rr.com [24.93.67.54])
	by hub.freebsd.org (Postfix) with ESMTP id 6296537B408
	for <freebsd-questions@freebsd.org>; Mon, 20 Aug 2001 19:24:52 -0700 (PDT)
	(envelope-from bts@babbleon.org)
Received: from i8k.babbleon.org ([66.26.62.201]) by mail7.nc.rr.com  with Microsoft SMTPSVC(5.5.1877.687.68);
	 Mon, 20 Aug 2001 22:24:47 -0400
Content-Type: text/plain;
  charset="iso-8859-1"
From: Brian T.Schellenberger <bts@babbleon.org>
To: "Alex Toushek " <toushek@canadiangeneral.com>,
	<freebsd-questions@FreeBSD.ORG>
Subject: Re: Security
Date: Mon, 20 Aug 2001 22:24:39 -0400
X-Mailer: KMail [version 1.2]
References: <200108202104.AA197657018@mail.canadiangeneral.com>
In-Reply-To: <200108202104.AA197657018@mail.canadiangeneral.com>
MIME-Version: 1.0
Message-Id: <01082022243903.00565@i8k.babbleon.org>
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Monday 20 August 2001 21:04, Alex Toushek  wrote:
> How do I setup the file structure so that the users and apache can
> access anything in the users home directory or sub-dirs off of the
> users home, but not letting them leave their home dir. This also
> goes for wuftpd? I've played around abit with using the -r with
> bash but, the user could not go into any of their own sub-dirs.
> I've also played with permissions but then apache could not find
> the files for their web sites? I am pretty pickled here, any
> assistance would help!!!

Use jail to give them access to just this area.
The easiest way to ensure that they get noplace else is probably to set up a 
fake "shell" that sets up a jailed version of your favorite shell.

man jail for more info.

>
> Alex
>
> ________________________________________________________________
> Sent via the Cangen WebMail Service at mail.canadiangeneral.com
>
>
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

-- 
Brian T. Schellenberger . . . . . . .   bts@wnt.sas.com (work)
Brian, the man from Babble-On . . . .   bts@babbleon.org (personal)

--------------------> Free Dmitry Sklyarov! <-------------------------

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message