LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 11-17-2004, 06:17 PM   #1
adrenaline_NZ
Member
 
Registered: Jun 2004
Location: Wellington, New Zealand
Distribution: Suse 9.3
Posts: 36

Rep: Reputation: 15
SFTP and users climbing the file tree


Hi all, I have setup an SFTP server to share files/photos whatever with family, I have setup the user and they can log in, they have read/write access to there home dir, but can climb up through the files above and read them and download them, this I don't want!

Ideally I should have the user not be able to go beyond their home dir. I had a look through some commands to do with chmod but couldn't see anything there that might help.

Is there away to restrict users from going beyond there home dir, either by sshd.conf or changing the read write properties of the /home file.

Thanks
 
Old 11-18-2004, 06:10 AM   #2
kanibaal_101
LQ Newbie
 
Registered: Nov 2004
Location: huizen
Distribution: redhat 9
Posts: 1

Rep: Reputation: 0
isnt there some button that says lock users in home directory?

gr:jeroen
 
Old 11-18-2004, 11:10 AM   #3
adrenaline_NZ
Member
 
Registered: Jun 2004
Location: Wellington, New Zealand
Distribution: Suse 9.3
Posts: 36

Original Poster
Rep: Reputation: 15
Quote:
Originally posted by kanibaal_101
isnt there some button that says lock users in home directory?

gr:jeroen
Didn't think so, but will have a look anyway.
Anyone else?

Cheers

N
 
Old 11-18-2004, 10:06 PM   #4
Demonbane
LQ Guru
 
Registered: Aug 2003
Location: Sydney, Australia
Distribution: Gentoo
Posts: 1,796

Rep: Reputation: 47
As far as I'm aware of Openssh by default doesn't support chroot in sftp.

However, a quick search in google yielded few interesting results:

http://www.google.com.au/search?hl=e...G=Search&meta=
http://www.sublimation.org/scponly/
 
Old 11-18-2004, 11:22 PM   #5
linux_terror
Member
 
Registered: Aug 2004
Location: Northbrook, Illinois
Distribution: CentOS-5
Posts: 311

Rep: Reputation: 30
I built a jail, full chrooted environment to accomplish this. All of my hosting clients are chrooted into their respective homes and have jailed(chrooted) ssh/sftp/ftp access to the server. There's a very nice tutorial on how to build the jail here --> http://www.tjw.org/chroot-login-HOWTO/ and to get the jailed sftp copy the sftp-server binary and the required libraries into the jail.

Hope this helps,
linux_terror
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
List Current SFTP users smurf Linux - Networking 0 02-12-2004 02:02 AM
chroot jail sftp users f1uke Linux - Security 1 07-28-2003 10:29 AM
sftp users can remove files without permission tunedLow Linux - Networking 6 03-06-2003 03:12 PM
limit users to a particular directory tree - ProFTP gogo Linux - Networking 5 07-03-2002 08:50 AM
Jailing SFTP Users to Home directory Jason_25 Linux - Networking 3 01-06-2002 08:32 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 07:04 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration