MdkActe said:

> On Fri, 31 Jan 2003 07:33:28 -0600
> "J.P. Pasnak" <[EMAIL PROTECTED]> wrote:
>
>> sftp and/or scp work just fine, but allowed the user to 'walk' the
>> filesystem.   I ended up just tightening the filesystem - a modified
>> msec level 4 - and now I have the client using Filezilla with scponly
>> as there shell, and everything works just fine.
>
> Check this one, little bit work to get it
> running, but it do just what you want.
>
> Jail Chroot Project:
> http://www.gsyc.inf.uc3m.es/~assman/jail/index.html
>

I did take a look at this project, but ended up with the same problems I
had when I manually created a jail.    As far as I can tell, it was a
problem with PAM, which is why I attempted to get the pam_chroot.so module
working.

I'm going to keep trying to get a solid chroot jail working, but for now
scponly and msec level 4 should keep the user out of anything but there
home directory, not allow them to run programs and still be able to
transfer files in a secure manner.   This was, afterall, what I was
attempting to do :)

-- 
Live fast, die young,
You're sucking up my bandwidth.

J.P. Pasnak, CD
CCNA
http://www.warpedsystems.sk.ca

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to