Re: Limiting Access, can this be done?



On 11 Apr, 17:40, "ame...@xxxxxxx" <ame...@xxxxxxx> wrote:
Hi,

I am running CentOS. I only use SFTP to transfer files to/from the
server. I can log in using SSH, of course.

The problem is, one of my clients wants an employee to be able to
upload files to one of their Apache directories. So, I've created a
user for them, but I want to limit access such that the user cannot go
anywhere else but that directory.

I've changed his home directory to be where the images will be
uploaded, but I can still change directories and look around.

Can this be done, limiting the users access to his home directory,
without destroying the Webserver from accessing the files??

Any help would be great....

Thanks.

Don't use SSH for this. OpenSSH has had chroot cages published for
this before, by people like me, but they've never been accepted into
the main codeline. There are some published sort-of-hacks for it, but
they don't work well.

Instead, use WebDAV over HTTPS. This is robust and effective.

.



Relevant Pages

  • Limiting Access, can this be done?
    ... upload files to one of their Apache directories. ... but I want to limit access such that the user cannot go ... but I can still change directories and look around. ... Can this be done, limiting the users access to his home directory, ...
    (comp.security.ssh)
  • Re: X11Forwarding, ssh -X, and /bin/su
    ... ]>but I'm not really tunneled using ssh then, ... ]connecting to the X server and have the home directory NFS-mounted ... ](unless you leave root unmapped over NFS, ... ]root-readable place and set the environment $XAUTHORITY variable ...
    (comp.security.ssh)
  • ssh is unable to get Xauthority from shared home dir
    ... in our environment we are opening CDE sessions on ... different solaris 8 systems for the same user. ... home directory is NFS mounted. ... Then we are opening ssh ...
    (SunManagers)
  • Re: Newbie: how do I limit a user to just a home directory?
    ... >> home directory. ... They can login using ssh and are in their own little world. ... the virtual host the client is using which looks inside their chrooted ...
    (comp.os.linux.security)
  • Re: Problem with chuser and pgrp/grp settings
    ... If I use ssh to create users -- e.g. "ssh targetserver ... But if I run the mkuser command with exactly the same ... permissions are correctly 770 on the home directory. ... The process umask setting determines the right of ...
    (comp.unix.aix)