Re: problems with rssh
Brought to you by:
xystrus
From: Derek M. <co...@pi...> - 2003-07-22 16:38:52
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Jul 22, 2003 at 08:57:31AM -0700, Mr. Mailing List wrote: > I'm trying to use winscp, which basically does > everything through scp. I also use sshfs from lufs. WinSCP does not work with rssh and scp. This is in the FAQ, which I recommend you read. Newer versions of WinSCP do support sftp, which should work, or so I am told... I have made no effort to verify that. To work with scp, WinSCP needs to be able to run a number of other commands, e.g. ls. However, rssh will not allow ls to be run, so WinSCP will not be able to get a list of files. Unless you use a recent version, which will require sftp. I don't know the details of making that work, nor do I care to... Check the documentation for WinSCP. > What I am wanting to do is to restrict user share to > /share, and possibly /share/html which symlinks to > /var/www/html(of which he is part of the group to > access both). You can not do this; it is impossible. The only way to "restrict" a user is to chroot that user's processes into some directory. When you chroot, the root of the file system becomes the directory you specify, for the chrooted process and all of its children. So if you chroot them to /share, then /share becomes /, and since /var/www/html is not under /share, it will be inaccessable, as if it did not exist at all. There is no way, via symlink or otherwise, to make it accessible, other than to actually move it somewhere under /share. Please read the documentation, specifically the file CHROOT in the source distribution (or /usr/share/doc/rssh-2.1.1/CHROOT if you installed from RPM), and also the manpage for chroot(2). > I did usermod and changed his shell to rssh, and I had > this in the config file? > # if you DO NOT want to chroot users, LEAVE THIS > COMMENTED OUT. > # Quotes not required unless path contains a space... > chrootpath="/share dir" You are chrooting all users to the directory "/share dir", which based on your description, does not exist. You want to change it to "/share", and make sure you've set up a proper chroot jail under that directory. However, based on what you've said, I don't think that's really what you want, and I don't think it's possible for you to get what you want. That is, unless you can be satisfied with limiting them to /share (and everything under it, of course) only. - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/HWh6djdlQoHP510RAtkhAKC262xbMTKp/kpdhYnw2iBfK+QiSACfXKd2 p3ofq/lFeqqx2oFjLZYurZU= =SfA5 -----END PGP SIGNATURE----- |