how can i jail a user? Post: 49646

Sponsored Content

Operating Systems Linux how can i jail a user? Post 49646 by TioTony on Wednesday 7th of April 2004 12:46:27 AM

04-07-2004

Registered User

I don't think you will get a simple answer on this one. You may want to google for chroot or restricted shell. It really depends on how much effort you want to put into it and what kind of access the users will have. If you plan to only give a user FTP access, chroot may work. If they are only telneting, ksh -r (restricted shell) may work. In either case there is a tedious set up and you have to be very meticulous about your permissions and umasks. I have played with chroot and ksh -r a few times but have never really had the need to fully jail users in the environments I have worked in. Someone from an ISP may be able to give you more guidance but I figured something was better then nothing.

TioTony

View Public Profile for TioTony

Find all posts by TioTony

7 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

FBSD jail question

I'm trying to establish a jail on a FBSD 6.1 system and have a couple of questions on bringing up the daemon. Under the jail man page there are two user flags that I am unclear on, -u username The user name from host environment as whom the command should run. -U...

2. What is on Your Mind?

Should Paris Hilton be in Jail?

Enough of boring techie topics!! Vote on Paris Hilton and her jail time!! What do you think?

3. UNIX for Dummies Questions & Answers

How to start a chroot jail?

I was reading an article on how it is very important to setup a chroot jail to run bind. I can follow what the article says but one thing I am unclear about is now on system boot the BIND process in the chroot jail will start since it the owner will no longer be root but some other user. Can...

4. Solaris

How to Jail ftp user

Hi Gurus, I am creating a user for ftp only on Solaris 10. However while testing I can see user can reach to root directory. I followed following while creating the user 1 Created a shell in /usr/bin/ftponly as chmod a+x to ftponly 2 Placed the entry in /etc/shells ...

5. UNIX for Advanced & Expert Users

ssh jail user

I have a developer that needs ssh access to a server to get to a specific directory. I want to restrict them to that directory. I've tried to set their shell as rksh which does jail them but only if they are using ssh from another unix system. If they are using putty or winscp they can still...

6. Cybersecurity

How to jail a process in his repertory ?

Hi all, I want to jail a process in his folder, so he can't have any link with a parent folder. Ex. If i'm a hacker, and I can upload my script & and I can start it, i'll could go to ../, /etc/passwd, etc.. So what I did is to chroot the process : I copied all libraries used by the...

7. Cybersecurity

How to jail a process?

Hello people, I'm creating a web game control panel, where people can manage their gameserver on a php made control panel. But i have no idea how to create an jailed inviroment for the gameserver, I've looked at possebilites for chroot, but i don't want the gameserver has any binaries of linux...

LEARN ABOUT SUSE

chroot

CHROOT(1)							   User Commands							 CHROOT(1)

NAME

       chroot - run command or interactive shell with special root directory

SYNOPSIS

       chroot NEWROOT [COMMAND [ARG]...]
       chroot OPTION

DESCRIPTION

       Run COMMAND with root directory set to NEWROOT.

       --help display this help and exit

       --version
	      output version information and exit

       If no command is given, run ``${SHELL} -i'' (default: /bin/sh).

AUTHOR

       Written by Roland McGrath.

REPORTING BUGS

       Report chroot bugs to bug-coreutils@gnu.org
       GNU coreutils home page: <http://www.gnu.org/software/coreutils/>
       General help using GNU software: <http://www.gnu.org/gethelp/>

COPYRIGHT

       Copyright (C) 2009 Free Software Foundation, Inc.  License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>.
       This is free software: you are free to change and redistribute it.  There is NO WARRANTY, to the extent permitted by law.

SEE ALSO

       chroot(2)

       The  full documentation for chroot is maintained as a Texinfo manual.  If the info and chroot programs are properly installed at your site,
       the command

	      info coreutils 'chroot invocation'

       should give you access to the complete manual.

GNU coreutils 7.1						     July 2010								 CHROOT(1)