Restrict a user to ~

Jaeger

Hi,

Not sure if there's a way to properly do this, or if it even should be done, but here goes.

Is there a way to restrict a user so that they only have RW access within their home directory? ie, not even R access outside that directory.

I'm not a pro with *nix, but wouldn't this mean that they wouldn't be able to run apps installed outside their home dir? (if this is the case it wouldn't make much sense to do it at all)

edit:

Actually, we could remove SSH access for that user, but then we'd still want to know how to only allow S/FTP access to a particular folder.

Khannie

Restricting ftp access should be no problem. It will be a configuration option in the ftp daemon you use. Have you one in mind?

Jaeger

I hadn't thought of which ftp daemon to use, I'm not even sure if there is one running already.

Actually, just tried FTPing to it, and it looks to be vsFTPd?

carveone

Jaeger wrote: »

I'm not a pro with *nix, but wouldn't this mean that they wouldn't be able to run apps installed outside their home dir? (if this is the case it wouldn't make much sense to do it at all)

I think you answered your own question there!

Actually, we could remove SSH access for that user, but then we'd still want to know how to only allow S/FTP access to a particular folder.

That's different. You can severly restrict people with a combination of ftp settings and chroot jails (man chroot). Anonymous ftp is done this way - the person ftping in has access to the appropriate file directory and nothing else...

Conor.

Jaeger

Thanks for the replies lads.

In the end removed access SSH access for all but two users, and editted the vsftpd.conf to uncomment chroot_local_user=yes

h57xiucj2z946q

you could use chroot on their account, not just through vsftp.