Re: Chrooted sftp on rhel3

Johan Booysen wrote:
Hi everyone,

I'm doing some tests setting up an sftp server, with setting up a chroot
jail for ftp users.

<snip...>

Any ideas on how to restrict access so ftp users are locked into their
own home directories - if that is even possible? It doesn't seem like
much of an issue to me, but I'd appreciate your thoughts.





I did this five or six years ago. I don't remember the details, but I can tell you it is possible to do. I seem to remember that I somehow set the chrootpath to /home/<user-directory> for each user. This made that directory the root for that user when the sign on so there is no way for them to cd in /home. Thus they can't see the other users' directories.

The advantage of doing it this way is that it is far less resource intensive than setting up a virtual machine for each user as they sign on.



Carl.


--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: FTP guest access chroot not working
    ... the "root" dir for the chroot is /home/someguy/ftp ... # chroot ftp users ... cannot get out of that jail. ... if you created a symlink inside the jail that points to some real ...
    (comp.unix.sco.misc)
  • Re: /devices jailbreak
    ... however as duplicating device special files does /not/ ... processes in a chroot env will ... duplicates in the chrootjail ultimately lead to the same actual ... But that path will be in the chrootjail, as far as the jailed process ...
    (comp.unix.solaris)
  • Re: /devices jailbreak
    ... processes in a chroot env will ... outside the chroot environment will of course report the device paths ... within the jail as a normal user with the restricted Korn ... directory tree, as expected, except for a couple /devices files ...
    (comp.unix.solaris)
  • Re: /devices jailbreak
    ... however as duplicating device special files does /not/ ... processes in a chroot env will ... duplicates in the chrootjail ultimately lead to the same actual ... But that path will be in the chrootjail, as far as the jailed process ...
    (comp.unix.solaris)
  • Re: exiting chroot()
    ... I understand the need and desire for the chroot jail, ... >> If security is so slack as to let someone login as root to run something ...
    (comp.unix.programmer)