I would like to disable access from outside to our server via ftp.  I would 
like to
offer access in the future via SCP over SSH.  Now with ftp I could say go into 
the
vsftp.conf and set an option to jail users to their home directory, then they 
could
browse the entire server.  But when I enable the use of ssh and connect with a 
client
such as WinSCP (Windows) or Gftp (Linux) or Fugu (OSX) I can browse the entire 
server.
So I googled ssh jail /home and all solutions I find recommend creating some 
sort of
/jail directory and relocating /home inside it such as /jail/home/username or
/home/jail/home/username.  I don't really like the sound of that and don't fully
understand what that could break in terms of LTSP and other apps.

Does anyone know of a way to keep users from traversing out of /home with 
modification
of sshd.conf or at least with an add-on that doesn't require messing with the 
standard
layout of /home?

Second minor problem is how to eliminate display of dot files when viewing with 
and SCP
client.  I would like to disable display of dot files on the server side to 
eliminate
the need of client modifications.  Any suggestions there would be helpful as 
well (I
don't want users to delete or even know that the dot files or directories even 
exist).
I am okay with users being able to change a setting on their client to 
purposely display
the dot files/folders, but I would like it to default to not displaying.  I 
figure if
they know enough to make a change to display the files, they must already know 
they
exist, and would then likely understand their role/importance.

Thanks,

Jim Kronebusch
Cotter Tech Department
453-5188 

-- 
This message has been scanned for viruses and
dangerous content by the Cotter Technology 
Department, and is believed to be clean.


-- 
edubuntu-users mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/edubuntu-users

Reply via email to