Users can get full directory path
Users can get full directory path
Hi,
I have a concern with security.
Suppose I have two users A and B
A get the full path the file starting from root. ex: /home/a/web/domain.com/public_html
My concern is that would they also be able to check directory of user B?
Is is possible to restrict them to their directory that is after domain.tld part?
I have a concern with security.
Suppose I have two users A and B
A get the full path the file starting from root. ex: /home/a/web/domain.com/public_html
My concern is that would they also be able to check directory of user B?
Is is possible to restrict them to their directory that is after domain.tld part?
Re: Users can get full directory path
I will surely look into commercial plugin.
However, my current question is that is it possible to jail Directory?
Like if a php request directory then /home/public_html would be shown to them instead of that full path
However, my current question is that is it possible to jail Directory?
Like if a php request directory then /home/public_html would be shown to them instead of that full path
Re: Users can get full directory path
You can try SFTP plugin and new templates.
SFTP plugin doesn't visualise anything and some users say: why I need this stuff? Let me explain a little how it suppose to work:
- without SFTP Choot Plugin user that have nologin shell can't use SFTP
- without SFTP Chroot Plugin user that have rssh shell user can use SFTP but he also can navigate file system beyond home his directory
- with SFTP Choot Plugin user that have nologin shell can use SFTP and can't navigate root file system he will be locked to his home
- with or without SFTP Chroot users that have bash as system shell can navigate root file system beyond home directory
The main purpose is to keep the user in the home directory.
SFTP plugin doesn't visualise anything and some users say: why I need this stuff? Let me explain a little how it suppose to work:
- without SFTP Choot Plugin user that have nologin shell can't use SFTP
- without SFTP Chroot Plugin user that have rssh shell user can use SFTP but he also can navigate file system beyond home his directory
- with SFTP Choot Plugin user that have nologin shell can use SFTP and can't navigate root file system he will be locked to his home
- with or without SFTP Chroot users that have bash as system shell can navigate root file system beyond home directory
The main purpose is to keep the user in the home directory.