1
vote
2answers
45 views

Create a user that can only connect to a specific directory

I've created a SSH folder for some friends. I've created the users to log in via SSH, but they connect to ~ how can I set to which folder they can connect? I have a directory called /usbdrv/ which ...
3
votes
2answers
172 views

Restrict password-less backup with SFTP

I need to perform backup of a server to my computer using Duplicity: duplicity /etc sftp://backup@my.dynamic.ip.address//home/backup Before this can be done, I need to allow password-less access by ...
2
votes
3answers
170 views

What happens if I delete all user passwords?

I have a Fedora VPS with a root user that has no password. I login with SSH keys. I had another, less privileged account on that server, used for web administration. I've now deleted its password ...
3
votes
2answers
1k views

Create user who can only access one directory [duplicate]

I would like to create a user that only has access to one folder and nothing else whatsoever. I have already created a user but he has access to other parts of the system according to corresponding ...
0
votes
0answers
103 views

Jailkit not working properly when connecting remotely from iPad via SFTP app

I used jailkit to add users and restrict them to a jail directory. It works for Linux and PC clients connecting to the ssh server but when I connect with iPad it gives them access to everything. I ...
2
votes
1answer
274 views

How to associate only one public key with a restricted shell like scponly?

I'd like to use a passwordless key to perform e.g. unison synchronization while being able to SSH into the server only with a password-protected key. The usual way of using scponly is changig the ...
1
vote
0answers
55 views

Run a script (for an app GUI) when logged from NX but limit shell commands on terminal

I have a user which will be accessing an app GUI via NX NoMachine. I want to allow this user to execute the command to bring up the app GUI (done automatically by NX) BUT prevent him from executing ...
3
votes
1answer
529 views

How to “jail” a user account's network capabilities on Linux?

Linux box a is connected to a home DSL line with dynamic DNS registration, hosting a tmux session to which multiple clients connect in read-only mode over SSH. All users connect using the same ...
5
votes
1answer
332 views

Is it safe to use /bin/cat as shell for a restricted user?

I need to remontely log on to few peoples machines to do maintanance tasks, but sometimes the machines can be behind firewalls or NAT's. The way I have been doing it is to give the user advice on how ...
11
votes
3answers
812 views

Adding a user who can only execute scripts remotely

I would like to create a user who can only do one thing: via ssh specify a script ( and commandline arguments to the script ) that resides in one particular folder ( for the purposes of this question ...
3
votes
1answer
205 views

SSH Bash Jail Session

I've seen some game tunneling service providers that jails the customer's account to a Information screen upon login and any input is ignored. Ctrl+C closes the SSH session, and disconnecting. This ...
8
votes
2answers
2k views

How to restrict an SSH user to only allow SSH-tunneling?

How can I restrict a user on the ssh server to allow them only the priviledges for SSH TUNNELING? i.e. So they cannot run commands even if they log in via ssh. My Linux servers are Ubuntu 11.04 and ...
8
votes
2answers
2k views

Creating a UNIX account which only executes one command

Is there a way to create a user account in Solaris which allows the users to run one command only? No login shell or anything else. I could possibly do it with /usr/bin/false in /etc/passwd and just ...