Re: limiting users to their home directory

On Mon, Dec 22, 2008 at 10:53 PM, Nick Smith <nick.smith79@xxxxxxxxx> wrote:
I run a small webserver with ubuntu 7.04 and would like to lock each
user down to be able to see/edit only files in his directory,
and disable ssh access.

Seems like that would be a huge security risk to have a user able to
browse to any directory he wishes and open/download the
contents.

Can't have your cake and eat it too (so to speak)

He has to be a user to use ssh. A user has to be able to access a
large number of folders outside his home folder or he can't use the
system (like /bin for instance....) Thus, if he has ssh access, he
can read all sorts of folders, because he has to be able to! The Unix
guys got this stuff figured out a long time ago. Now, read only
access isn't that useful - as someone else pointed out it's quite
arguable that there's not much risk there.

If you want to restrict them further, then don't make them a real user
on the system. ssh is out.

Brian

--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

Relevant Pages

  • Re: Move large number of files from AIX to Windows
    ... quantity of files and folders involved that ... Move large number of files from AIX to Windows ... NFS and SSH, ...
    (AIX-L)
  • Re: Move large number of files from AIX to Windows
    ... Tried looking into cygwin/rsync as suggested above? ... quantity of files and folders involved that ... NFS and SSH, ...
    (AIX-L)
  • Re: Tellnet Client for Linux
    ... never thought that I need some folders to group hosts that I connect to. ... to work on Linux and feel like you work on Windows. ... using ssh:) Try to google. ...
    (comp.os.linux.development.apps)
  • Re: [opensuse] rsyn and ssh pass
    ... I have several folders to backup to an external server ... I don't want to have a permanent open ssh from my computer to the ... (I'm reluctant to type the pass on the command line :-) ...
    (SuSE)
  • Re: limiting users to their home directory
    ... and disable ssh access. ... browse to any directory he wishes and open/download the ... large number of folders outside his home folder or he can't use the ... users and documents, not necessarily system security. ...
    (Ubuntu)