Page 1 of 1

Users can get full directory path

Posted: Sun Aug 14, 2016 9:31 am
by chirag
Hi,
I have a concern with security.
Suppose I have two users A and B
A get the full path the file starting from root. ex: /home/a/web/domain.com/public_html

My concern is that would they also be able to check directory of user B?
Is is possible to restrict them to their directory that is after domain.tld part?

Re: Users can get full directory path

Posted: Sun Aug 14, 2016 12:09 pm
by chirag
I will surely look into commercial plugin.
However, my current question is that is it possible to jail Directory?
Like if a php request directory then /home/public_html would be shown to them instead of that full path

Re: Users can get full directory path

Posted: Wed Oct 26, 2016 7:55 am
by skurudo
You can try SFTP plugin and new templates.

SFTP plugin doesn't visualise anything and some users say: why I need this stuff? Let me explain a little how it suppose to work:
- without SFTP Choot Plugin user that have nologin shell can't use SFTP
- without SFTP Chroot Plugin user that have rssh shell user can use SFTP but he also can navigate file system beyond home his directory
- with SFTP Choot Plugin user that have nologin shell can use SFTP and can't navigate root file system he will be locked to his home
- with or without SFTP Chroot users that have bash as system shell can navigate root file system beyond home directory

The main purpose is to keep the user in the home directory.