Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 Mar 2005 01:24:49 -0500
From:      Alec Berryman <alec@thened.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: ssh - restricted shell
Message-ID:  <20050331062449.GE96244@thened.net>
In-Reply-To: <200503301628.56047.wizlayer@gmail.com>
References:  <424B13EF.6050400@att.net> <200503301628.56047.wizlayer@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--0QFb0wBpEddLcDHQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

wizlayer on 2005-03-30 16:28:55 -0500:

> I thought this was accomplished when initially setting up a user's=20
> account?  I'm under the impression that when a user clients sshd,=20
> s/he still can't go beyong the boundaries of his/her existing=20
> account on the server.  Of course: if $impression =3D "delusion"=20
> then someone _please_ correct me!  fi :O

If you mean 'outside of his home directory', then yes, a user can go
outside 'his/her existing account on the server'.  He can't read,
modify, or execute files he doesn't have permission for, however.

--0QFb0wBpEddLcDHQ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCS5exAud/2YgchcQRAsngAKC0rZC5fVh8qJXBBNHPOVLPu4NlogCg1bPr
OcR6N9QqWR+rONooEby/wJw=
=WyPo
-----END PGP SIGNATURE-----

--0QFb0wBpEddLcDHQ--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050331062449.GE96244>