[Nottingham] chroot-ed file transfer

Martin martin at ml1.co.uk
Fri Sep 9 12:44:31 UTC 2011


On 9 September 2011 13:34, Dylan Swift <dylan.swift at gmail.com> wrote:
> Hi Martin,
> most openssh implementations will also allow scp:
> for a push operation:
> scp [options] /path/to/file <user>@<host>:/path/to/file/location/
> for pull, just swap the last 2 parameters
>
> rsync can also specify ssh as a transfer protocol:
> rsync [options] /path/to/file <user>@<host>:/path/to/file/location
> OR
> rsync [options] -e "ssh <ssh options>" /path/to/file <host>:/path/to/file
> OR
> rsync [options] -e "ssh <ssh options> <host>" /path/to/file /path/to/file
>
> Note that you need to be careful with trailing /'s in rsync

Thanks and ok on that count.


> Note that neither of these are chrooted. If you have permissions to write to
> a part of the filesystem then you can specify that in the path on the remote
> target

That's the aspect I'm trying to protect against... I'm wanting to
limit the users so that they cannot even see anything else and so at
worst, they can only trash their own areas...

Any easy way for that for scp and rsync?


Cheers,
Martin



More information about the Nottingham mailing list