Restrict Commands with rssh for sftp use

mamars · n00b Joined: 31 Mar 2005 Posts: 10

Hallo!

I've set up a sftp server with rssh, also tried scponly but I think I keep with rssh.
My user based configuration with rssh to allow/disallow sftp,scp,cvs and so on and my chrooting works great. However, I am searching for a method to disallow commands like chmod inside the chroot jail. Is there someone who has an idea on this issue? I googled around but didn't find anything. Hope someone may help.
Greets
mamars

MALON3 · Tux's lil' helper Joined: 16 Jan 2004 Posts: 87

U can use grsec for this.
With grsec u can enable a lot of chroot-jail restrictions how disable chmod, mknod and so on...

Look at the Gentoo Hardened Project for more informations
http://www.gentoo.org/proj/en/hardened/

gretting malon3

mamars · n00b Joined: 31 Mar 2005 Posts: 10

Thank you... I will have a look at it. I'm already using the hardened-sources, just didn't start using grsecurity :oops:

.
Although it is not the easy way I was hoping to find :roll:

Greets
mamars