On Tue, Jul 25, 2000 at 04:29:16PM +1000, George Vieira wrote:
> Is it possible to lock telnet users to their home directories under RedHat
> >=6.1?
No. You almost certainly don't want to do that. You might
think that you do, but you don't.
You can hide things from the users, by putting them in other
directory branches that don't have the appropriate read-execute
permissions (execute permissions on directories determine which
users can open which directories). You would normally keep
users out of each others' home directories this way.
Users have to be able to see "up" the tree, all the way to root,
though, because that's how the system accesses their home
directory: by reading down the tree from root. If any directory
along the way is not accessible to them, then they won't be able
to see their home directory either.
You can't hide the /etc directory from your users, but you can
probably hide the contents of most of the files, if you so
choose. The master password file is hidden that way, usually.
Some files simply have to be readable by everyone, for security
reasons: they must be readable by daemon processes that you want
to run as user "nobody".
--
Andrew
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug