> > > The only way I can think of is to pre-create an .ssh directory, and chown
> > > it to root with no write permissions.
> > 
> > Doesn't work; since the user has rwx permission in their home directory,
> > they can just delete anything below it.
> 
> Create a file in .ssh owned by root with owner write only.  Change the
> owner of .ssh to root and set it owner write only.  Now the user cannot
> delete the directory.

They might not be able to delete it, but they can still re-name it.



Reply via email to