Re: chroot

[Craig Sanders <cas@taz.net.au>]

On Tue, Dec 26, 2000 at 04:23:15PM +0000, Martin WHEELER wrote:
> Can anyone on this list help me to get defined users logging in to be
> automatically chrooted to a restricted area in the fs?  (/home/... )

read the docs on rbash (restricted bash shell) and set their shell to
/bin/rbash in /etc/passwd.

it prevents users from changing out of their home directory (but doesn't
actually stop them from viewing or editing files in other dirs), and
restricts them to a subset of available binaries.

it's not as useful as you might think it is, and takes a lot of work
to actually make it usable.  

imo, it's not worth the bother - if a user can't be trusted with a
shell, then don't give them one. better to spend your effort on making
sure that all file permissions are correct and that there are no suid
root exploitable holes on your system.

craig

--
craig sanders