Restricting root access in Openssh [SOLVED]

dem1an · n00b Joined: 14 May 2002 Posts: 28

1. I've looked for quite a while and can't seem to find the answer. How do I keep a user logging in with SSH (using OpenSSH) in his home directory. VSFTP has a setting for keeping users out of root and an access list for allowing certain users access here. I couldn't find the equivalent to this in openssh.

2. Is there any reason I shouldn't assign ftp users to the default ftp group that I found already created in my /etc/group?

3. Which vi editor do you recommend that I emerge?

Thanks!

dem

celestialwizard · Posted: Tue Aug 29, 2006 4:15 am Post subject:

there are plenty of documents on the net detailing how to setup a SSH Chroot Jail.

Also look at setting the user's shell to rbash which is a restricted version of bash (just a symlink) that enables some extra security features.
_________________
I may be a hardware bigot, but my stuff works

Mad Merlin · Veteran Joined: 09 May 2005 Posts: 1155

1. You can't do that through SSH itself, once they log in they have a regular shell, if you want to lock them into ~, you'll have look into other methods, you could perhaps set their shell to rbash rather than bash, which restricts a lot of things.

2. Not that I'm aware of.

3. Vim.
_________________
Game! - Where the stick is mightier than the sword!

dem1an · n00b Joined: 14 May 2002 Posts: 28

Thanks! I ended up using just sftp and bailed on limiting ssh access:
[url]
http://gentoo-wiki.com/HOWTO_SFTP_Server_(chrooted%2C_without_shell)
[/url]