From owner-freebsd-questions@FreeBSD.ORG Tue Jul 1 12:37:52 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C7E1A37B401 for ; Tue, 1 Jul 2003 12:37:52 -0700 (PDT) Received: from devil.stderror.at (at00d01-adsl-194-118-044-149.nextranet.at [194.118.44.149]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8CA3D43FDD for ; Tue, 1 Jul 2003 12:37:51 -0700 (PDT) (envelope-from pinhead@stderror.at) Received: by devil.stderror.at (Postfix, from userid 1000) id C57211534E; Tue, 1 Jul 2003 21:37:49 +0200 (CEST) Date: Tue, 1 Jul 2003 21:37:49 +0200 From: Toni Schmidbauer To: freebsd-questions@freebsd.org Message-ID: <20030701193749.GD49688@devil.stderror.at> Mail-Followup-To: freebsd-questions@freebsd.org References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="YToU2i3Vx8H2dn7O" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i Subject: Re: Account Privilege X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: toni@stderror.at List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jul 2003 19:37:53 -0000 --YToU2i3Vx8H2dn7O Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 01, 2003 at 03:10:55PM -0400, Nucking Futs wrote: > I'm trying to set up user accounts so that they can not view any further= =20 > than their home directory. At the very least I don't want them to be abl= e=20 > to do a cd .. and view /usr/home and view the other user accounts=20 > information. How would I set this up so they couldn't view other user=20 > accounts or preferably any other part of the system. - you could use bash -r (restricted bash) - or chroot(8), on google i found the following article: http://www.tjw.org/chroot-login-HOWTO/ this how to is for linux but it should work on freebsd to. - if you just want to restrict access to other users home dir's, creating a group per user and chmod 750 the users home dir should be sufficient.=20 hth, toni --=20 Behandle die Menschen, als w=E4ren sie, was sie sein | toni at stderror dot= at sollten, und du wirst ihnen helfen, zu werden, was | Toni Schmidbauer sie sein k=F6nnen. - Johann Wolfgang von Goethe | --YToU2i3Vx8H2dn7O Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE/AeMNu/mjSj7RMocRAjizAJ92IgbSZgSjRcTE5nwjgNpKwn3FfgCeKjBm IYaqaM6NVI6WKt2XIBtdnv4= =nFVO -----END PGP SIGNATURE----- --YToU2i3Vx8H2dn7O--