Not sure... it "might" be possible using AppArmor somehow. I know that sftp can use the a subsystem executable and in theory a copied sftp-server backend subsystem with some kind of AppArmor logic might do the trick.
Just thinking out loud. From: "Mrohs, Ray (JMD)" <ray.mr...@usdoj.gov> To: LINUX-390@vm.marist.edu Date: 10/20/2010 10:09 AM Subject: Caging sftp users in SuSE 10.3? Sent by: Linux on 390 Port <LINUX-390@vm.marist.edu> Hi All, Is there a way to restrict scp and sftp users to their own directories in 10.3? The ChrootDirectory option in sshd_config is only available as of SLES 11. Ray Mrohs U.S. Department of Justice 202-307-6896 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/ ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
<<inline: graycol.gif>>
