I agree with you; I don't want to change all of my directories to chmod 700 or chmod 750 so that "Others" can't see anything. I guess I was wondering more on the lines of making SSH limit their view to nothing higher than their own home directory. The shared hosting companies do that -- I can only see my home directory and nothing more, but I know other people are hosted on the same machine. I think I'll try asking them (in a round-about way.)

Richard


On May 11, 2004, at 10:41 PM, Scott Paul Robertson wrote:

On Tue, May 11, 2004 at 04:23:50PM -0700, Richard Miller wrote:
I signed up for Linode.com per the recommendations of several other
UUG'ers and I have really liked it!  Thanks!

I want to use my Linode to informally host several friends' websites.
I've learned how to create new users, passwords, home directories, and
VirtualHosts (all of which took a while), but the question of the hour
is how can I limit each user to only seeing his or her own Home
directory when ssh'ing in?


If you're just looking for them to not be able to get to other home directories, ensure that each home directory's permissions (with ls -l) look something like:

drwx------ user group

This will prevent anyone (except root) other than that user from
accessing the directory. This is usually the default when users are
made.

Now if you're looking to prevent them from looking at the root of the
system, you'll need to do a little more. But, changing permissions on
the root of the filesystem, and various sub-directories is not always
good. While it'll prevent your users from getting to them, it'll prevent
programs from getting to them. very bad. Thankfully your users can't
edit these files (with rare, intentional, exceptions) due to only root
having write permission.



Attachment: smime.p7s
Description: S/MIME cryptographic signature

____________________
BYU Unix Users Group 
http://uug.byu.edu/ 
___________________________________________________________________
List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list

Reply via email to