Shell server security

SystemDownfall · 06-10-2005, 01:01 AM

I want to serve shell accounts for some of my friends and was wondering if there was a way where they could not view any folders but their home directory but still have the ability to execute commands and programs.

Thanks in advance,
Sys

kevner · 06-10-2005, 01:18 AM

you might check out the chroot command, it limits users so that they cant go higher than a certain directory, e.g. their home directory.

Im not sure if chroot still allows comands to be run from /bin or not..

hope that helps

pk21 · 06-10-2005, 08:12 AM

Haven't tried this yet but it sounds cool:

http://www.packetstormsecurity.nl/fi...-0.3d.tar.html

Iron Bars SHell is a restricted Unix shell. The user can not step out of, nor access, files outside the home directory. Two ASCII configuration files are used for more control. The system administrator can define which commands may be executed by the user. No other executables are allowed. The admin also has the opportunity to define what kind of files the user may create. If a file has a certain extension (such as .mp3, .c, etc.), ibsh automatically erases it.