Re: [suse-security] limiting sftp users to specific dir
Hi! On Fri, 22 Oct 2004 14:34:09 -0500, James M. Patton - Contractor <mpatton@sc.army.mil> wrote:
Quite complicated process, but I think I can follow that... except that it's not really what I want either. First of all, the user would have lot's of strange dirs and files in their new home dir. It also has the same problem that the shell needs to be changed, so what happens when they login locally?
I would suggest reading the fine manual (RTFM) on this process. It is only difficult for those who probably don't have the mental capacity to administer a Linux system anyway - which since you're at least trying to do I would assume that you may.
I think that was quite insulting comment! I did read the manual, and that's what I commented on. See, in Windows I used to SSH server from SSH.com. There was a simple list (actually in GUI, but that doesn't matter) where I listed those users that were to be limited to their own directories. On another line, I specified that the dir is d:\sftp\%username% for instance. Comparing that, well yes I do think it is complicated. But that is not the same thing as saying that I didn't understand any of it! I'm trying to not to make any predictions about your mental capacity! I first answered all your points, but it cam clear to me that you are just picking up a fight here. The "evil empire" kind of gives you away... I thought here would be civilized people on this list that have good enough self esteem that another OS can be mentioned. (I would like to hear though why something that is designed from ground up as friendly desktop OS would mean it's not safe? I think Mac OS X is called being friendly...?) And sorry for questioning Linux security. I guess your answer for why SuSE 9.1 by default lets all users see others files, would be that: that's Linux if you are stupid then it's your own fault. And that is just the thing that I'm trying to avoid (i.e. by not knowing enough and leaving some thing open that is for some odd reason left open in the first place.) So, sorry for not knowing the right term! And sorry to ask about it too! Chroot just didn't come to my mind when looking at dictionary to find the right terms! I read the manual, but it didn't answer quite a few of my questions, like what does that (chrooting SSH) mean for the user who also logins locally? But never mind, I'll try to find some Linux "pros" that can help me (and doesn't attack me immediately if I do not understand everything from a manual or FAQ) - you obviously do not know or didn't even read my problem description. -- HG
participants (1)
-
Hugo