Operating Systems > Linux and UNIX

permissions for the paranoid

(1/1)

Master of Reality:
How can I setup so that a user has no access to anyhting but a couple folders??
would it be??:
chmod 'UID'-rwx -r /
chmod 'UID'+rw /folder/they/have/access/to

how do i find out the UID of a user??

[ July 05, 2002: Message edited by: Master of Reality / Bob ]

rsd:
Well, that does not prevent the user from schmoozing around.

# info chroot

Chroot will confine the user to the specified path.

As for UID, almost all distros have userconf, or kuser (kde) or mandrake has as an add-on userdrake.

But you don't have to worry about UID, you can just chmod/chroot the username.

From console: less /etc/passwd

[ July 05, 2002: Message edited by: rsd ]

Master of Reality:
i want to restrict an ssh account user to read/write/execute within only certain directories. I am using no GUI. Chroot can only be used by the super-user. How would i specify it for a specific user if they dont own the file/directory, chmod only allows me to specify either owner, group of owner, all, users not in the group.

[ July 05, 2002: Message edited by: Master of Reality / Bob ]

[ July 05, 2002: Message edited by: Master of Reality / Bob ]

rsd:
http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5&arch=&apropos=0&manpath=OpenBSD+Current

$HOME/.ssh/config
This is the per-user configuration file.  The format of this file is described above.  This file is used by the ssh client.  This file does not usually contain any sensitive information, but the
recommended permissions are read/write for the user, and not accessible by others.

Navigation

[0] Message Index