Restricting users with chroot

[danno74]

Greetings,

After figuring out the ProFTPD took care of locking down users logged into the server with via FTP. The problem I had was I would login via SSH as the user, and I was able to move around, then I discovered when I logged into FTP, it was locked.

Is there a way to lock them down when they SSH connect as well? This is a liability I would like to take care of.

Thanks for any help!

 

[hoinz]

Hi,
you could make the user's login shell a restricted one.
Read your shell man page about ist.
hope this helps

 

[thedaver]

Each of these is a seperate service with seperate configurations.....

You'll need to let SSH know to confine users, which is non-trivial BTW. I believe it requires patching SSH last I recall.

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/