limiting users to their home directory

[Jan Torben Heuer]

Nick Smith wrote:

> I found a program called scponly in one of my google searches, and
> that seems disable ssh access, but he can still use winscp
> or similar and browse the entire filesystem and open/download anything
> at will.  It seems strange this would be default behavor.
> Seems like that would be a huge security risk to have a user able to
> browse to any directory he wishes and open/download the
> contents.

I'd argue that you can have a secure system without restricting users to their homedirectory. But we are using scponly, too and users can only see their home. So It is possible with scponly.

Jan