Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Dec 1997 17:07:12 +1100 (EST)
From:      "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To:        Ernie Elu <ernie@spooky.eis.net.au>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: Virtual Telnet
Message-ID:  <Pine.BSF.3.91.971231170412.28150F@panda.hilink.com.au>
In-Reply-To: <199712310434.OAA10677@spooky.eis.net.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 31 Dec 1997, Ernie Elu wrote:

> I know it is not too hard to set up a virtual domain, website, and ftp site
> for a client, but is it possible to have a restricted login?
> 
> By that I mean if you have a freebsd system hosting www.xyz.com and the
> client wants to be able to telnet in to hand edit files, is it possible to
> restrict their access to only their home directory and its subdirectories?
> 
> Sort of an automated chroot thing you can't bypass I guess.

Build a chrooted area with /etc, /bin, /usr/bin, /usr/lib, /usr/libexec 
files which are necessary.
Change inetd to run telnetd.sh and have telnetd.sh do:

-----
#!/bin/sh
cd /newroot
/usr/sbin/chroot . exec /usr/libexec/telnetd
-----

Danny



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.971231170412.28150F>