Re: [cobalt-developers] Limiting Shell Access

["Paul Rosenthal" <paul.rosenthal@xxxxxxxxxxxxxxxxx>]

Re:

Can't do it with SSH or telnet, because neither has it built into the
protocol <frown>.  The reason you can do it with FTP is because the FTP
daemon used by Cobalt has it's own commands (it doesn't rely on the ones
on the system) and applies it's own chroot.

And if you could do it, then everyone's login would have to have their
own copies of the programs they want to run, since linux couldn't find
the "real" ones in a chrooted directory structure.

I've been told it can be done with FreeBSD, and in fact I'm studying
that now, but you can't run FreeBSD on the RaQ (at least not without
completely destroying the gui <wry grin>.

Jeff



Thanks for the info.  I know FTP works because it is a separate program that
enforces the access limitations itself.

I don't fancy changing all the permissions on each directory etc, so will
stick to the policy of ensuring that no sensitive data is stored in areas
that may be accessed.

However, if you do make any progress, please let me know.

Thanks and Regards

Paul Rosenthal