Hopefully a security conscious guru will correct me if I'm wrong, but....

As I understand it, all you really need to do is create a shell account.  The 
user will only be able to see their own folder (and any others with o+r 
access).  They will not be able to access some devices unless you add them to 
the appropriate group.

I'm not sure a chroot jail would really make sense in your case.  But, it 
couldn't really hurt any, and might add to the sysadmin experience/skills you 
mentioned...

HTH

Shawn

On Thursday 09 December 2004 19:28, Curtis Sloan wrote:
> Essentially, I would like to treat the situation like any semi-trusted or
> untrusted user account (e.g. a shell provider).
>
> If it matters, the account is being set up to provide them with minimal
> access necessary to play DVDs.
>
> I figured I could turn it into a learning experience and improve my
> sysadmin skills.  :-)

_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying

Reply via email to