SSH jail and ACL lists

thebomb · 03-09-2010, 03:13 AM

Hello

I need a howto or method to jail the user to its home directory and use ACL lists at the same time.

example, the user can only navigate to its home directory and /var/log/httpd/httpd-access.log read access.

All comments and thanked in advanced.

Thank you.

Web31337 · 03-09-2010, 03:32 AM

Well this is not exactly what you requested but... what about symlinking to /var/log/httpd/ from user homedir, making the /var/log/httpd directory mode 0751, owned by root:root, and file httpd-example-org.log owned by root:user with mode 0640, etc? Set modes on other directories so that they can't be listed by anyone xcpt for root, only their content could be acessed directly.
Many website hosters do it this way.
Or, if you want, you can chroot user and make a hard link to logfile(didn't ever try that but it should work).