SSHD

whitetiger0990 · 01-02-2005, 04:44 PM

I am wondering how to retrict SHH users to their own directory. Let's say I have Fred and his directory is /var/www/htdocs/fred. He can ftp in and he can ssh in. Both start in his directory and he owns the directory but with SSH he can cd / and see system files. He can even open them up in an editor but he can't save the changes. I'd like it if he couldn't even see them. Thanks

trickykid · 01-02-2005, 04:50 PM

The keyword is chroot

When doing this though, you'll possibly need to create a /bin type directory with some common commands they'll need to use and such...

whitetiger0990 · 01-02-2005, 05:17 PM

I made a directory called /var/users/default and tried to chroot to it. but it said:

Code:

#chroot /var/users/default
chroot: cannot run command `/bin/bash': No such file or directory

btmiller · 01-02-2005, 05:50 PM

There needs to be a shell to run in the chroot directory unless you specify some other command. See man chroot for more details. Properly setting up a chroot jail can be tricky -- there are some tools that help with this, so you should google around for more info.