Re: Shell access in chroot?

From: Lowell Gilbert (freebsd-security-local@be-well.no-ip.com)
Date: 01/04/03


To: "Max Clark" <max@clarksys.com>
From: Lowell Gilbert <freebsd-security-local@be-well.no-ip.com>
Date: 04 Jan 2003 11:45:16 -0500


"Max Clark" <max@clarksys.com> writes:

> Hi all,
>
> I would like to set up a box and provide limited shell access to users.
> Is there a way I could chroot a user on a ssh/telnet session like ftp?
>
> If I were to give shell access to users, what kind of local security
> hardening should I employ? Tips/Suggestions would be greatly
> appreciated.

man jail(8) or for less strenuous uses, chroot(8)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Shell access in chroot?
    ... I would like to set up a box and provide limited shell access to users. ... Is there a way I could chroot a user on a ssh/telnet session like ftp? ...
    (FreeBSD-Security)
  • Sendmail
    ... If I have a machine that any user has shell access. ... Itīs just a mail server. ... Is such machine vulnerable for sendmail? ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • ftp access
    ... What do I use in passwd to allow ftp, but not shell access on account? ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: your mail
    ... On Mon, 20 Jan 2003, Oleg Shevtsov wrote: ... > how to give specific user FTP but no shell access? ... > But I don't want to give shell account. ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: your mail
    ... >> how to give specific user FTP but no shell access? ... is possible to exploit a bug in OpenSSH to gain ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)