[cobalt-developers] Limiting Shell Access

["Paul Rosenthal" <paul.rosenthal@xxxxxxxxxxxxxxxxx>]

We have a Raq4 which also runs Tomcat (though I don't think that is
relevant).

We are setting up virtual sites for each of our users (which means they
automatically get their own Tomcat context).  Usually each user will be a
site administrator for their own site.

We would like to give these users shell access via telnet.

However it seems that once logged in as themselves, they can view the
contents of not only other users' directories, but also just about every
other directory on the server.

I have trawled through loads of postings on this subject, but I am unable to
draw any conclusions, as there seem to be a lot of conflicting opinions and
contradictions.

Can anyone tell me if there is a way to limit a user to their own virtual
site's home directory and below, and whether this can be set up
automatically?

While trying to avoid being flamed on the issue, what I am trying to achieve
the same result for shell access as the FTP server gives by limiting each
user to only their own site and below.

Any help would be greatly appreciated.

Regards

Paul Rosenthal