|
|
Secure Shell
How to restrict ssh user to the home directory ? Apr 21 2009 04:25PM J. Bakshi (bakshi12 gmail com) (7 replies) Re: How to restrict ssh user to the home directory ? Apr 23 2009 09:26PM Jose Celestino (japc co sapo pt) Re: How to restrict ssh user to the home directory ? Apr 23 2009 04:07PM Romain Pelisse (belaran gmail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 23 2009 05:20PM Jorge Fco. Rivera (jorge_grivera hotmail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 25 2009 02:34PM J. Bakshi (bakshi12 gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 07:15PM Shawn Merdinger (shawnmer gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 05:21PM Benny Helms (benny egovmt com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 23 2009 02:57PM J. Bakshi (bakshi12 gmail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 24 2009 01:03AM Robert Hajime Lanning (robert lanning gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 05:16PM Marcin Semik (mutifo gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 04:15PM Hari Sekhon (hpsekhon googlemail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 22 2009 05:19PM J. Bakshi (bakshi12 gmail com) |
|
Privacy Statement |
> Dear list,
>
> I am running a remote suse server and need to give ssh access to the
> users who can work on their particular web folder only. The version of
> ssh server is openssh-5.0p1-21.1
>
> I have already did huge google search but could not find any sshd
> features which can allow ssh users to restrict them in their home directory.
> I have found some documentations where chroot or jailkit is used to
> achieve this and these need some more configuration and obviously
> "chown root:root <home-folder>" . But I need an option which simply
> restrict ssh users so that they can't browse beyond their home directory.
> It is also not possible to do "chown root:root <home-folder>" as the
> folders which are used as home directory are actually web folder under
> apache htdocs having apache permission. I don't need sftp but ssh
> access. Is it really impossible to have this feature through ssh technology ?
>
> Thanks
>
Short answer, "no."
Long answer...
ssh forks the user's login shell, when not using sftp. Because ssh is just a
transport, not a shell, you would need to look into some sort of restricted
shell as the user's login shell, or go all out with a chroot environment that
encapsulates a normal shell.
--
And, did Galoka think the Ulus were too ugly to save?
-Centauri
[ reply ]