From owner-freebsd-questions@FreeBSD.ORG Wed Nov 2 03:31:52 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C164B16A41F for ; Wed, 2 Nov 2005 03:31:52 +0000 (GMT) (envelope-from ecrist@secure-computing.net) Received: from grog.secure-computing.net (grog.secure-computing.net [216.243.161.73]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2629943D45 for ; Wed, 2 Nov 2005 03:31:51 +0000 (GMT) (envelope-from ecrist@secure-computing.net) Received: from [192.168.1.102] (snipe.secure-computing.net [216.243.161.77]) (authenticated bits=0) by grog.secure-computing.net (8.13.1/8.13.1) with ESMTP id jA23W7mX073446 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT); Tue, 1 Nov 2005 21:32:07 -0600 (CST) (envelope-from ecrist@secure-computing.net) DomainKey-Signature: a=rsa-sha1; s=grog; d=secure-computing.net; c=nofws; q=dns; h=in-reply-to:references:mime-version:x-priority: content-type:message-id:cc:content-transfer-encoding:from:subject:date:to: x-mailer:x-spam-status:x-spam-checker-version; b=QHH3ZIeTQ4yLqphm7UEFSNZLJz1Khw8r8D7bnnLNiRFHjEcoSKD/KGlt9kdC5PvTU yMdHHj+EohTeLIYqv/yaw== In-Reply-To: <53534.68.165.89.73.1130883859.squirrel@mail.el.net> References: <53534.68.165.89.73.1130883859.squirrel@mail.el.net> Mime-Version: 1.0 (Apple Message framework v746.2) X-Priority: 3 (Normal) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Eric F Crist Date: Tue, 1 Nov 2005 21:31:41 -0600 To: kalin mintchev X-Mailer: Apple Mail (2.746.2) X-Spam-Status: No, score=-4.3 required=4.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham version=3.1.0 X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on grog.secure-computing.net Cc: freebsd-questions@freebsd.org Subject: Re: user limits X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Nov 2005 03:31:52 -0000 On Nov 1, 2005, at 4:24 PM, kalin mintchev wrote: > > hi all... > > i was reading the login.conf man to figure out a way to limit user > from a > class to only certain directories. apparently that isn't possible > there. > > there is a path, but thats $PATH for the particular user... not > really > what s/he can see or not... > > if i can not restrict user cd-ing into certain directories using > login.conf how can i do it? > > thanks.... > > -- > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" > You need either MAC (Mandatory Access Control) or jail. I would probably recommend jails for your purpose. ----- Eric F Crist Secure Computing Networks http://www.secure-computing.net