Limited SSH users

race · 10-17-2004, 09:08 PM

Hi

Is there a way to change the SSH privs so that an already created user can have the functions that are availiable to them through ssh are only the ones that i specify? basically i want this user to only be able to have chmod, cp ,mv , rm, limited vi and nothing else. How can this be accomplished?

thanks

fblucher · 10-17-2004, 10:15 PM

Build a chroot jail. Give SSH access into it. Have the users live within it. Only have the commands you want them to have in the jail, etc, etc. There's probably easier ways but nothing's sprining to mind. Obviously this may not work so well with already existing users and the rights they may have. I'll keep thinking.

Seeya,
Finn.

race · 10-17-2004, 11:18 PM

thanks for the reply but what is a chroot jail?

fblucher · 10-17-2004, 11:32 PM

It's like a private root, for a process or user to run in. They're a very std security model. Lots of doco about them out there.

Seeya,
Finn.