Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: How to restrict user to a particular directory?
Operating Systems AIX How to restrict user to a particular directory? Post 302939909 by jim mcnamara on Monday 30th of March 2015 08:53:27 PM
Old 03-30-2015
It requires root o set up a chroot jail. Not to be the user trapped in one. If it was not AIX I would suggest chroot.

A chroot jail is:
1. user is limited to the commands you provide
2. user is trapped in his/her directory.

chroot comes from the fact that the root directory for a normal user is the / directory. chrrot manes to change the root directory, such that /home/joe becomes joe's / directory. He can only go down that directory tree to subdirectories.

The reason I am not taking a solid position is that AIX has some 'interesting' features that other UNIX flavors do not have. So for all I know that post I cited is correct. For solaris, for Linux, and for HPUX the answer is chroot jail. Since none of the AIX guys havde answered:

This is for a login account to a chroot jail using openssh.

The Best Linux Tutorials: Openssh with AIX chroot
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Restrict my search to current directory.

Hi every1, There is a folder with .lst files which has email id's of our project group. I want to find files which has my email id starting with sachin but i dont want find command to search subdirectories. I have read about prune but i didnt understand that. I am pretty new in this field.... (7 Replies)
Discussion started by: sachin.gangadha
7 Replies

2. UNIX for Advanced & Expert Users

Restrict FTP access to a single directory for only one user.

Hi All, It will be very great if you can help me in this issue. Thanks in advance. I need to enable FTP on a solaris9 server. I need to create a new user some "xxxxxx" and he can only FTP the files to and from between /tftpboot directory and network devices. Other users should not... (8 Replies)
Discussion started by: santhoshkumar_d
8 Replies

3. UNIX for Dummies Questions & Answers

how do U restrict a user to a single directory?

specifically - I don't need to restrict a user to a single directory - but I want them to be "ROOTED" to their home directory. so if my home directory is /home/onlyme when I login - if I do a pwd - I want to see: / but in real life I will be in /home/onlyme - it just appears as root to... (10 Replies)
Discussion started by: itobenon
10 Replies

4. UNIX for Dummies Questions & Answers

restrict one user to see only his home directory in his profile

Hi I need to restrict one user to see only his home directory and one more directory how i can do this in his profile. The OS is Red hat linux I create a user -- tec and group calle --tec one the user log in he will see /home/tec and he need to see /opt/load this dirctory... (6 Replies)
Discussion started by: aboorkuma
6 Replies

5. Red Hat

Restrict user to a particular directory

Hi I have a Fedora10 server and i need a particular user to view files only in a particular folder. All other files in other folders having "read" permission for all shouldn't be accessible to this user. Please let me know if ther's a way. Thanks, HG (5 Replies)
Discussion started by: Hari_Ganesh
5 Replies

6. Solaris

Restrict FTP User to a Directory

I am using Solaris 10 on SPARC. SunOS ddw 5.10 Generic_139555-08 sun4u sparc SUNW,SPARC-Enterprise I have put some text files in a directory '/u01/network' I want to create a ftp user which can just read the files in the network directory. The ftp user shouldn't be able to navigate or see... (4 Replies)
Discussion started by: fahdmirza
4 Replies

7. Solaris

How to restrict user to a specific directory in solaris 10

Hi all, I want to create a new user and grant him ONLY transfer files access to a specific directory where he can only upload and read the files. He should be restricted to this activity only. Regards (6 Replies)
Discussion started by: gilldn
6 Replies

8. Red Hat

Restrict user access

Hi there I have an application user on my system that wants accesses to these file systems as such: rwx: /SAPO /SAPS12 /R3_888 /R3_888B /R3_888F /R3_888R r: /usr/sap these are the existing FS permissions:ownerships: # ls -ld /SAPO (9 Replies)
Discussion started by: hedkandi
9 Replies

9. Solaris

restrict sudo and chown in specified directory

Hi Dears, I have one requirement like this: general user A can execute command C with root privilege by sudo configuration some folders and files are created during the command C execution user A cannot access those folders and files because the owner is root user, so I want the user A... (0 Replies)
Discussion started by: crest.boy
0 Replies

10. UNIX for Beginners Questions & Answers

Is there a way to restrict a user (owner) to execute scripts from a specific directory

Hello, I have a user Bob on a RHEL 7 server1. Where his script area is "/home/Bob/scripts/" and he is the owner for this directory. On the server1, there is a NFS mount from another server2, with path as "/global/work/" and Bob is the owner for this directory too in server2. (Same UID and GID... (5 Replies)
Discussion started by: karumudi7
5 Replies

LEARN ABOUT NETBSD

pam_chroot

PAM_CHROOT(8)						    BSD System Manager's Manual 					     PAM_CHROOT(8)

NAME

     pam_chroot -- Chroot PAM module

SYNOPSIS

     [service-name] module-type control-flag pam_chroot [arguments]

DESCRIPTION

     The chroot service module for PAM chroots users into either a predetermined directory or one derived from their home directory.  If a user's
     home directory as specified in the passwd structure returned by getpwnam(3) contains the string ``/./'', the portion of the directory name to
     the left of that string is used as the chroot directory, and the portion to the right will be the current working directory inside the chroot
     tree.  Otherwise, the directories specified by the dir and cwd options (see below) are used.

     also_root	Do not hold user ID 0 exempt from the chroot requirement.

     always	Report a failure if a chroot directory could not be derived from the user's home directory, and the dir option was not specified.

     cwd=directory
		Specify the directory to chdir(2) into after a successful chroot(2) call.

     dir=directory
		Specify the chroot directory to use if one could not be derived from the user's home directory.

SEE ALSO

     pam.conf(5), pam(8)

AUTHORS

     The pam_chroot module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division
     of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the DARPA CHATS research program.

BSD
								 February 10, 2003							       BSD
All times are GMT -4. The time now is 02:58 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy