Skip site navigation (1)Skip section navigation (2)
Date:      30 Aug 2002 13:04:02 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.no-ip.com>
To:        Gerard Samuel <gsam@trini0.org>
Cc:        FreeBSD Questions <questions@FreeBSD.ORG>
Subject:   Re: Restricting user
Message-ID:  <44u1lc6zy5.fsf@be-well.ilk.org>
In-Reply-To: <3D6F9A15.5020308@trini0.org>
References:  <3D6F9A15.5020308@trini0.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Gerard Samuel <gsam@trini0.org> writes:

> I would like to restrict a user to their home directory.

The canonical answers are jail(8) and chroot(8).

> jail seems to be just for processes.

The distinction escapes me.  If a user's processes are jailed, the
user can't do anything outside of the jail.  jail(8) is the most
secure approach to this problem.

> What else is there that I can look at.

Several shells have "secure" modes, but they're not really intended
for security purposes.  A malicious attacker can get out of those
modes fairly easily.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44u1lc6zy5.fsf>