<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Discussion on Chroot users with OpenSSH: An easier way to confine users to their home directories ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/discussions/102-267294/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-18T16:08:11-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[slackware]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3519560]]></link>
        <description><![CDATA[does this work with slackware 13.37 ?? this seems very simple/cut and dry.... great way to confine users.... just hope i can make it work with on slackware box]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3519560]]></guid>
        <dc:creator><![CDATA[infam0us1]]></dc:creator>
        <pubDate>Mon, 07 Nov 2011 02:33:53 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Stumbled across ...]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3504154]]></link>
        <description><![CDATA[... this little post and was very much astonished as to how well it answered the very problems I was experiencing.  Just wanted to relay a warm and heartfelt thanks.  Driveway Lights | Outdoor String Lights]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3504154]]></guid>
        <dc:creator><![CDATA[jack6666]]></dc:creator>
        <pubDate>Thu, 29 Sep 2011 13:05:30 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[RE: Chroot users with OpenSSH: An easier way to confine users to their home]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3234929]]></link>
        <description><![CDATA[Doing this with crash SSH if you don't have the right version of OpenSSH installed. If you can't walk over to the server, then you will be locked out and need to have your host provider manually fix the issue at the server itself.If you have *any doubts*, temporarily enable Telnet so that you can have a backdoor in to fix your sshd_config file if needed.I followed advice which led people to believe that you can have an old version, say 3.9 on CentOS, that if your server does regular updates your version has been backported and all necessary patches have been applied. DO NOT RELY ON THIS! Manually install the update if your version is not up to date.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3234929]]></guid>
        <dc:creator><![CDATA[HowdyMedia]]></dc:creator>
        <pubDate>Fri, 29 Jan 2010 11:23:52 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[hello!]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3010399]]></link>
        <description><![CDATA[Subsystem     sftp   internal-sftpMatch Group sftp    ChrootDirectory %h    ForceCommand internal-sftp    AllowTcpForwarding no&gt;&gt;&gt; Only chroot for SFTP, but we are using SSH services and bash shell, what do we configuration for SSH and using command at home's bash shell]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-3010399]]></guid>
        <dc:creator><![CDATA[leluckimsach@...]]></dc:creator>
        <pubDate>Sun, 08 Feb 2009 09:10:40 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[RE: Chroot users with OpenSSH: An easier way to confine users to their home directories]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2633134]]></link>
        <description><![CDATA[Can you recommend vpn software with a management gui to allow &amp; disallow select folder access &amp; priviledges per user?  (windows or linux, doesn't matter)thanks]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2633134]]></guid>
        <dc:creator><![CDATA[Mikeo1313]]></dc:creator>
        <pubDate>Wed, 05 Nov 2008 21:11:22 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[I think it may provide too much function by default]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2531765]]></link>
        <description><![CDATA[My first instinct is that it would set a minimum level of functionality too high.If a user doesn't need, tar, ls, cd or some other specific function then I'd leave it out of the chroot environment (ls and cd are stretching it but it's an example). With Busybox, I think you'd need to recompile without the unneeded functions else every user gets more than they need by default.It may break least privilege by forcing you to open up more than is required by the user.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2531765]]></guid>
        <dc:creator><![CDATA[Neon Samurai]]></dc:creator>
        <pubDate>Wed, 25 Jun 2008 06:51:13 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[kudos &amp; busybox?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2531451]]></link>
        <description><![CDATA[You've done it again, man. I've always been a huge fan of openssh, and I really like interesting articles such as this.What would you think of putting busybox (y'know, the statically-linked command-line shell-in-a-shell swiss army knife) inside the chroot environment, in place of all the other stuff? This would save time, but I suppose if this is a setup that is intended to be replicated repeatedly, you would want to automate that with a shell script or something, anyway.Just a thought. What think the rest of you?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2531451]]></guid>
        <dc:creator><![CDATA[eldergabriel@...]]></dc:creator>
        <pubDate>Tue, 24 Jun 2008 19:54:40 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[When possible, don't copy files hard-link them]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2531046]]></link>
        <description><![CDATA[It will save disk space and reduce maintenance work.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2531046]]></guid>
        <dc:creator><![CDATA[techrepublic@...]]></dc:creator>
        <pubDate>Tue, 24 Jun 2008 12:11:26 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Goes into my booklet of hints]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2530833]]></link>
        <description><![CDATA[Excellent article.It's a gem, rich and concise, that teaches me a new thing every line. And it is such a useful idea, I know I will come back to it many times in the future. Thanks!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-267294-2530833]]></guid>
        <dc:creator><![CDATA[cflange]]></dc:creator>
        <pubDate>Tue, 24 Jun 2008 09:16:48 -0700</pubDate>
    </item>
    </channel>
</rss>

