Date: Tue, 20 Mar 2001 03:37:30 +0100 From: Roelof Osinga <roelof@eboa.com> To: James Jefferson <jjefferson@iBizcorp.com> Cc: "'questions@FreeBSD.org'" <questions@FreeBSD.ORG> Subject: Re: EU setup Message-ID: <3AB6C269.493D61A8@eboa.com> References: <40DFA2708D54D41193F20001025665B62639F4@MAIL>
next in thread | previous in thread | raw e-mail | index | archive | help
James Jefferson wrote: > > how can one go about limiting the EU from cd out of his or her home dir. With jails and a whole lotta trouble. It's a nice concept, but it's also a whole lotta trouble. The trick of jails - and mind you, they can be broken out of - is that they limit all to a directory. What this means is that you can't, say, symlink to a /bin/ls binary since the link can't be followed. And that's just *one* binary. Another and way more simple way would be to give them a vewwy restrictive shell. Maybe like mc(d) coupled with a jail() or some such thing. Roelof -- duh is @ http://BeerIsBitter.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AB6C269.493D61A8>