limiting users to their home directory

Loïc Grenié loic.grenie at gmail.com
Tue Dec 23 18:23:54 UTC 2008


2008/12/23 H.S. <hs.samix at gmail.com>:
> Nick Smith wrote:
>> I run a small webserver with ubuntu 7.04 and would like to lock each
>> user down to be able to see/edit only files in his directory,
>> and disable ssh access.
>
> There have been many responses to this post. I just want to throw
> another point of view (if it hasn't been mentioned already).
>
> From your query above, it appears you want users to not see anything at
> all other than their own home. I am not sure this is easy to do, if at
> all possible. They will at least have to see (able to read and execute)
> the commands they use (ls, rm, mkdir, etc.). So here itself I see some
> contradictions in your query above.

     You do not need to be able to read a command to execute it. You
  can deny the read permission to most of the command (not the
  shell-scripts, though). You can also deny the read permission of the
  directories (that disallows the browsing).

(as root)
chmod 711 /bin
chmod 755 /bin/ls
(as user)
ls

   works the same as usual.

         Loïc




More information about the ubuntu-users mailing list