Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Mar 2005 17:51:59 -0800 (PST)
From:      Juan Sanchez <jsanchez@juansanchez.net>
To:        Duane Winner <dwinner-lists@att.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ssh - restricted shell
Message-ID:  <20050330174900.P27079@juansanchez.net>
In-Reply-To: <424B13EF.6050400@att.net>
References:  <424B13EF.6050400@att.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Couldn't you put everyone else into the same group, except for the 
outsider?  Then you could make secret directories -rwx.  Directories 
without execute permission cannot be listed.

Regards,

Juan

On Wed, 30 Mar 2005, Duane Winner wrote:

> Hello,
>
> Does anybody know the best technique to accomplish this:
>
> We have a server that we use for mostly internal development, and run an SSH 
> server.
>
> We have an outsider who we want to allow to ssh into this server and do some 
> work.
>
> However, because he is an outsider, we don't want him roaming around our 
> server, moving, looking, doing, or anything outside of his own home 
> directory.
>
> How can I restrict him to his own home directory?
>
> I thought I ran into instructions once for doing this, but I can't find 
> anything right now.
>
> Or was I thinking of scponly ?
>
> That might do it, except we do need to set him up to to run some scripts 
> within his home directory after he uploads stuff via scp.
>
> Thanks,
> DW
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050330174900.P27079>