[BlueOnyx:08370] Re: limit ssh access

[Chris Gebhardt - VIRTBIZ Internet]

Ken - Precision Web Hosting, Inc wrote:
> ----- Original Message ----- 
> From: "Gregg" <greggk1 at cox.net>
> To: "'BlueOnyx General Mailing List'" <blueonyx at mail.blueonyx.it>
> Sent: Friday, September 02, 2011 2:05 PM
> Subject: [BlueOnyx:08368] limit ssh access
> 
> 
>> Hello,
>> I have a user that needs shell access.  How do I give him shell access
>> without having them be able to see the entire system directory?  I created
>> the user, and when I log in as him, I log in to his personal directory, 
>> but
>> if I change directory /
>> I get the entire system directory.  He can't do much, but just the fact 
>> that
>> he can see all those files to me is a security issue.  Is there a way that 
>> I
>> can lock him into his personal directory and not have him be able to look
>> anywhere else?
>> Thanks.
>>
> 
> 
> Gregg
> 
> There is no way,  that I know of,  to do that.
> 

Correct - currently this cannot be done.  If/when BlueOnyx learns how to 
really chroot a user, then maybe, but that would be a fairly sizable 
undertaking.

Many of us on this list operate hosting businesses utilizing BlueOnyx 
and really, you should evaluate if your user REALLY "needs" shell 
access.  Because more often then not... they don't REALLY.  They just 
WANT it.

-- 
Chris Gebhardt
VIRTBIZ Internet Services
Access, Web Hosting, Colocation, Dedicated
www.virtbiz.com | toll-free (866) 4 VIRTBIZ