Date: Wed, 11 Apr 2007 10:47:42 +0200 From: Roland Smith <rsmith@xs4all.nl> To: L33T Networks <fbsdhelp@l33tnetworks.com> Cc: freebsd-questions@freebsd.org Subject: Re: Locking SSH Users to $HOME Message-ID: <20070411084742.GA915@slackbox.xs4all.nl> In-Reply-To: <461C9ABB.70005@freemail.hu> References: <C2416C49.523%fbsdhelp@l33tnetworks.com> <461C9ABB.70005@freemail.hu>
next in thread | previous in thread | raw e-mail | index | archive | help
--/04w6evG8XlLl3ft Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Apr 11, 2007 at 10:22:19AM +0200, Nagy L=E1szl=F3 Zsolt wrote: > L33T Networks wrote: > >Using the SSHD server, how can I lock users SSH'ing into a box into their > >home directory, without having access to the /usr/home directory as a=20 > >whole? > > =20 You could set them up with a restricted shell. Use e.g. 'bash -r' or the equivalent 'rbash'. See the RESTRICTED SHELL section in the bash manual to understand what it does. Roland --=20 R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) --/04w6evG8XlLl3ft Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.3 (FreeBSD) iD8DBQFGHKCuEnfvsMMhpyURAifEAJ9sK5NlsGFe+g2MxSLoNsK+Jkb7ZwCff7Zl CT6QyT4aGVWGSpSwdFlS7w0= =i6M4 -----END PGP SIGNATURE----- --/04w6evG8XlLl3ft--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070411084742.GA915>