On Thu, Jan 30, 2003 at 02:41:39PM -0600, J.P. Pasnak wrote: : : Todd Lyons said: : : > -----BEGIN PGP SIGNED MESSAGE----- : > Hash: SHA1 : > : > Franki wrote on Thu, Jan 30, 2003 at 02:51:50PM +0800 : : >> So would I... I had to give out two logins recently, and would have : >> loved to : >> be able to lock them in their directory.. : >> I was hoping Todd would respond with some wisdom on this one.. :-) : > : > Due to the way that the privelege seperation in ssh works, I don't know : > that it's possible. I realize that _anything_ is possible if you put : > enough work into it, but it's going to consume a lot of space. You : > might as well chroot the whole distro. : : So you're saying my latest endevour, trying to get pam_chroot.so to work : are fruitless?
With stock OpenSSH yes. Check out the patches at http://chrootssh.sourceforge.net/ to accomplish what you're after. --Jerry Open-Source software isn't a matter of life or death... ...It's much more important than that!
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
