Can i build a jail

mahmoud · 02-14-2008, 08:46 AM

Hi i have a little problem some of my clients want to come into my server to pick up the back up anytime they want but i dont want them moving around in my server is there a way i can build something like a jail so when they get in they can only access the folder for the backups and thats all no cd out to any other dir no viewing or as less activity as possible

MS3FGX · 02-14-2008, 08:52 AM

Yes, there are a few ways to go about that.

What type of freedom do these clients require? Are a we talking about a simple HTTP/FTP download, or do they need to have interactive shells?

anomie · 02-14-2008, 09:39 AM

And is this server any of the OSes in your sig?

mahmoud · 02-14-2008, 09:58 AM

no freedom just sftp so it might be an interactive shell to get the backups and thats it
the OS is Debian

anomie · 02-14-2008, 10:35 AM

Then take a look at Linux-VServer and see if it meets your requirements. Check out the Debian-specific install documentation as well.

If the sftp users can look around a virtualized system, I don't imagine it'd hurt much. You can further restrict their abilities by managing permissions on their home directories and giving them a scponly shell.

mahmoud · 02-14-2008, 11:00 AM

i have vserver installed fact is i really didnt think of doing that thanks
will do that