Read the Bash man page about the "Restricted Shell" option. That should do exactly what you want.
It used to be as simple as specifying /bin/rsh as the default shell for users in passwd, but the last time I tried that it didn't work, and I forget why. The option is still there though, you just have to figure out how to use it. > -----Original Message----- > From: Linux on 390 Port [mailto:[EMAIL PROTECTED] > Behalf Of Tom > Duerbusch > Sent: Friday, May 20, 2005 11:12 AM > To: [email protected] > Subject: Re: [LINUX-390] Linux default permissions > > > All that stuff, initially sounded good. > > But, it turns out to be the mirror image of what I was actually trying > to do. > > That is, to prevent a set of users from browsing all sorts of > directories that are not their own. > > By using the .profile.local, I can put a 'umask 117' to eliminate any > created file from being viewed by anyone not in the same group, or > owner. > > But that would effect all users, including myself. That's not too > good. > > So, I thought about putting the 'umask 117' in the .profile > for certain > users. Where others would not be able to see their files, these users > can still browse around. > > But this may be getting me on the right track. > > What I'm really trying to do, is to prevent certain users from being > able to 'cd' out of their home directory structure. PureFTPd has a > parameter to disallow this, I'm now looking for the same thing for a > Linux "Putty" user. > > So, is there any way to restrict a Linux user from being able to CD > away from their home directory? That would really be great. > > Tom Duerbusch > THD Consulting > > >>> [EMAIL PROTECTED] 05/18/05 4:02 PM >>> > Shouldn't that go into /etc/profile.local ? > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: INFO > LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > -------------------------------------------------------- If you are not an intended recipient of this e-mail, please notify the sender, delete it and do not read, act upon, print, disclose, copy, retain or redistribute it. Click here for important additional terms relating to this e-mail. http://www.ml.com/email_terms/ -------------------------------------------------------- ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
