Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 May 2011 13:47:15 +0200
From:      =?ISO-8859-1?B?QmFs4XpzIE3hdOlmZnk=?= <repcsike@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: Limitting SSH access
Message-ID:  <BANLkTinnErTDZYwsV8OgzRfbMTXoHzQeMw@mail.gmail.com>
In-Reply-To: <4DC139F7.9080109@infracaninophile.co.uk>
References:  <07CAE521148F4E7392202CD6B031F504@jarasc430> <4DC139F7.9080109@infracaninophile.co.uk>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On 4 May 2011 13:35, Matthew Seaman <m.seaman@infracaninophile.co.uk> wrote:

> On 04/05/2011 10:08, Jack Raats wrote:
> > I have a question concerning SSH op a FreeBSD 7.4-STABLE server.
> >
> > Is it possible to limit the SSH access?
> > I want t o restrict a user to his own home directory.
> > So that if he connects to the server with SSH he only can go to his own
> home dir.
> > Also the same for sftp...
> >
>
> I believe you will need to install a version of OpenSSH from ports to
> get that functionality.  It's the CHROOT config option in
> security/openssh-portable
>
>        Cheers
>
>        Matthew
>
> --
> Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
>                                                  Flat 3
> PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
> JID: matthew@infracaninophile.co.uk               Kent, CT11 9PW
>
>
Hello,

It should work with the base openssh on 7.4. Check your version with sshd
-v.
Here, search for chroot(or use google :)):
http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5

Regarding ssh login, I usually use "rbash" from the ports, that restricts
the user from leaving his or her home directory!

Regards,

Balazs Mateffy.



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?BANLkTinnErTDZYwsV8OgzRfbMTXoHzQeMw>