|
|||||||||
| Linux RedHat, Ubuntu, SUSE, Fedora, Debian, Mandriva, Slackware, Gentoo linux, PCLinuxOS. All Linux questions here! |
unix and linux operating commands |
|
|
|
Thread Tools | Search this Thread | Display Modes |
|
#1
|
||||
|
||||
|
how can i jail a user?
I created a user
useradd -d /disk2/ftpfiles me How would i beable to jail me so he could not move arround my file system? |
| Sponsored Links | ||
|
|
#2
|
||||
|
||||
|
I don't think you will get a simple answer on this one. You may want to google for chroot or restricted shell. It really depends on how much effort you want to put into it and what kind of access the users will have. If you plan to only give a user FTP access, chroot may work. If they are only telneting, ksh -r (restricted shell) may work. In either case there is a tedious set up and you have to be very meticulous about your permissions and umasks. I have played with chroot and ksh -r a few times but have never really had the need to fully jail users in the environments I have worked in. Someone from an ISP may be able to give you more guidance but I figured something was better then nothing.
|
| Sponsored Links | ||
|
|
|
#3
|
||||
|
||||
|
Thanks, i did lots or reading lastnight bout jailing users but most of the websites for it is for proftp, i'll look up restricted shells though. I'm jsut setting up an FTP for myself and my friends, there not really rocket scientists so i just want to prevent them from doing somthing stupid accidentaly. My professor showed me a really easy way last semester, i'm going to try to hunt him down today and find out what that was. Thanks.
|
|
#4
|
||||
|
||||
|
Im guessing your useing ProFtp?
If thats the case, and you whant to "jail" a user you could simply change/make a line in the config file My conf file is in - /etc/proftp.conf simply put this line in it: DefaultRoot "~" that would make the users home dir the absolute root for the user. it is still possible to login via telnet/ssh/rlogin with that user and pass. So thats a problem. Ive tryed to put (in /etc/passwd file) /false instead of like /bash as shell, but that will only make the ftp to deny access |
| Sponsored Links | |
|
|
#5
|
||||
|
||||
|
Actuily i'm using Wu-ftp but i'm in the process of setting up my system again so i may this time use ProFtp, just cause it seems to be so popular.
|
| Sponsored Links | ||
|
|
![]() |
More UNIX and Linux Forum Topics You Might Find Helpful
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| ssh jail user | toor13 | UNIX for Advanced & Expert Users | 2 | 08-26-2011 11:15 AM |
| SSH chroot jail problems | pokey144 | Debian | 11 | 09-09-2010 03:06 AM |
| SFTP Jail With Sun SSH Not OpenSSH | Donkey25 | UNIX for Advanced & Expert Users | 2 | 04-22-2010 02:47 PM |
| How to Jail ftp user | kumarmani | Solaris | 2 | 06-18-2009 11:24 AM |
|
|