Re: Restrict account to scp only to user directory.
puppy_friend_at_yahoo.com
Date: 02/14/05
- Previous message: mika: "Re: SSH logins only"
- In reply to: Darren Tucker: "Re: Restrict account to scp only to user directory."
- Next in thread: Nico Kadel-Garcia: "Re: Restrict account to scp only to user directory."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 14 Feb 2005 09:41:30 -0800
Thanks. I didn't consider that. Although they can't rename anything.
They can't login interactively and they don't have access to the "mv"
command over ssh the way it's setup.
I was more concerned that in the good old days. You could hit ctrl-c
really quickly during login and break out of the startup scripts with
default settings for everything. But that doesn't seem to be the case
any longer.
David
Darren Tucker wrote:
> On 2005-02-11, puppy_friend@yahoo.com <puppy_friend@yahoo.com> wrote:
> > I forget to say that I set ownership of all the .bash* files and
> > everything in $user/bin to nobody. I also made them read only so
the
> > user shouldn't be able to overwrite them.
>
> Don't forget that you need to make sure they don't have write
permission
> on $HOME too, otherwise they can, eg, rename the .bash* files and
create
> new ones. This probably means that $HOME should not be owned by the
user
> either.
>
> --
> Darren Tucker (dtucker at zip.com.au)
> GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
> Good judgement comes with experience. Unfortunately, the
experience
> usually comes from bad judgement.
- Previous message: mika: "Re: SSH logins only"
- In reply to: Darren Tucker: "Re: Restrict account to scp only to user directory."
- Next in thread: Nico Kadel-Garcia: "Re: Restrict account to scp only to user directory."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|