scponly set user rights

SchwipSchwap · 09-12-2008, 08:44 AM

Hi!

How can i set the user rights with scponly?

to allow for example only upload files to home directory and not list or

download the files?

Thx For help!

Schwipschwap

anomie · 09-13-2008, 05:00 PM

I don't have a scponly installation on hand to test this out with, but here's some thoughts...

Code:

> mkdir fun-test

> chmod 300 fun-test/

> touch fun-test/GOT-IN

> ls fun-test/
ls: : Permission denied

> ls -l fun-test/
total 0
ls: : Permission denied

> echo 'boo' > fun-test/GOT-IN

> cat fun-test/GOT-IN
boo

So, w + x permissions for the user on the directory sort of satisfy what you're looking for. Unfortunately if a user knew a file name I suspect he could still download it (since in this contrived test above, the cat worked).

I don't know of any ssh facility that would get you the behavior you're looking for. (But if I were sufficiently motivated, that's where I'd begin -- reading OpenSSH documentation.)

SchwipSchwap · 09-13-2008, 11:38 PM

Thx for Reply,

tryed chmod allready. My Problem is the user must be allowed to create new subdirectorys and those are readeable then.

scponly provides a shell with commands like 'ls' in it. I will try to delete the unwanted command.

Thought there is any configuration file like a ftp server offers to set user rights.

Is there a other way to grand many people a encrypted file transfer which is stable and dosnt allow the people to see or download the files?

anomie · 09-14-2008, 03:26 PM

Perhaps ftp over SSL. (I recommend vsftpd.)