Create multiple user accounts securely

[josholson]

Hello,

I recently installed gentoo from stage one, and would like to learn how to create multiple luser accounts so that they are only allowed to access their own home directories. i've tried removing the users from the "users" group by doing usermod -g nobody username but that didn't work.

Thanks.

[presto8]

Depending on how restrictive you want to be, rssh may be the ticket:

From the man page:

rssh is a restricted shell for providing limited access to a host via ssh(1), allowing a user whose shell is configured to rssh to use one or more of the command(s) scp(1) or sftp(1) cvs(1), rdist(1), and rsync(1), and only those commands. It is intended primarily to work with OpenSSH (see http://www.openssh.com), but may work with other implementations.

If you are just trying to keep users from walking around your filesystem, you can either create a chroot jail (although they won't be able to run any system commands) -- or you can go through and strip the world readable/executable bids (i.e., chmod o-rwx file1 file2...).

[josholson]

The chroot jail sounds like what i'm looking for. I'll google around for a bit. Thanks.