From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1HDBPl-0001eV-U9 for garchives@archives.gentoo.org; Sat, 03 Feb 2007 03:18:11 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.8/8.13.8) with SMTP id l133Gwk4007238; Sat, 3 Feb 2007 03:16:58 GMT Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.170]) by robin.gentoo.org (8.13.8/8.13.8) with ESMTP id l133D36O001218 for ; Sat, 3 Feb 2007 03:13:03 GMT Received: by ug-out-1314.google.com with SMTP id z38so919632ugc for ; Fri, 02 Feb 2007 19:13:03 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=XihRKLUz4FyxHNU/pmhLi1ACdlHrJNQFDItbUA+K6bv0VIidIrONkAbxvY3lkgAm94b1y48BcesX8OdZxElwqnQ2MqK/M37QSAn9ep1M+Fr87v1xeQI//IkGcWazjkWneqQ5Am1UkdGjpm5WDTj4nBgi+i4nXpfcSNmM1VT0YrQ= Received: by 10.78.172.20 with SMTP id u20mr890649hue.1170472381912; Fri, 02 Feb 2007 19:13:01 -0800 (PST) Received: by 10.78.162.9 with HTTP; Fri, 2 Feb 2007 19:13:01 -0800 (PST) Message-ID: <5bdc1c8b0702021913k6fd4f260m7932da2a6293bca4@mail.gmail.com> Date: Fri, 2 Feb 2007 19:13:01 -0800 From: "Mark Knecht" To: gentoo-user@lists.gentoo.org Subject: [gentoo-user] scp login but confine the user to his home directory? Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Archives-Salt: 944cc170-7404-47d4-b8fd-dfe5166b26d1 X-Archives-Hash: c74106e2972868a2bb9437c370451726 Hi, I'm wondering if it is possible and/or advisable to set up an account where a user can scp files in and out of his home directory using scp but if he logs into the machine using ssh he cannot go anywhere outside of his home directory? Mainly the intended application is a group file server but it is possible that we may want to run some scripts in the account so being able to ssh in has an advantage over ftp. That said I don't want the users cd-ing around the machine, etc. How would I set something like this up? Thanks in advance, Mark -- gentoo-user@gentoo.org mailing list