Jump to content
  • Announcements

    • spinynorman

      Mandriva Official Documentation

      Official documentation for extant versions of Mandriva can be found at doc.mandriva.com.   Documentation for the latest release may take some time to appear there. You can install all the manuals from the main repository if you have Mandriva installed - files are prefixed mandriva-doc.
    • paul

      Forum software upgrade   10/29/17

      So you may have noticed the forum software has upgraded !!!
      A few things that have changed. We no longer have community blogs (was never really used) We no longer have a portal page.
      We can discuss this, and decide whether it is needed (It costs money) See this thread: Here
Sign in to follow this  
Guest quakey

limit access in SSH?

Recommended Posts

Guest quakey

Hi,

 

I am pretty new to this...basically I just found out that I could SSH into my own linux box with any account login and password and once I am in, I can go anywhere I want, just like I am acutally using the copmuter physically.

 

However, I would like to limit the access. The main reason is that I created some account for my friends so they can make some web pages (I also run Apache). They could FTP or SSH into my machine. I figured out how to limit their access in FTP. But in SSH, they could go anywhere they want. I want them to only be able to access their respective home directory. How do I do that???

 

Thank you.[/i]

Share this post


Link to post
Share on other sites

When your friends SSH into your box, they only have the same privileges as they would while sitting at the box.

 

Their user account is the same account used for SSH, so any limits plaed on a user will be the same whether he is sitting in front of the box or SSHing into it.

Share this post


Link to post
Share on other sites
Hi,

 

I am pretty new to this...basically I just found out that I could SSH into my own linux box with any account login and password and once I am in, I can go anywhere I want, just like I am acutally using the copmuter physically.

 

However, I would like to limit the access. The main reason is that I created some account for my friends so they can make some web pages (I also run Apache). They could FTP or SSH into my machine. I figured out how to limit their access in FTP. But in SSH, they could go anywhere they want. I want them to only be able to access their respective home directory. How do I do that???

 

Thank you.[/i]

 

One thing you can do to force them to stick to the user accounts and keep them from logging in as ROOT, is to edit this line in your /etc/ssh/sshd_config file;

 

PermitRootLogin no (Change this from yes to no or remove the # in front if it is commented out)

 

 

Cheers

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×