Re: chroot and access to directory OTHER than user's home directory.....

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In the last episode (Feb 09), Jon Price said:
> I need to allow multiple users (users connecting from different machines)
> access to a box so they can all drop (via sftp) files in a common drop
> area, say /Whatever/Drop.  If I use OpenSSH with chroot and a single
> account "dropaccount", then all users can access that account via sftp
> given the appropriate setup (sshd_config, public keys and such).  The
> /Whatever/Drop directory is owned by a different account name.  That can't
> change.
> 
> How can I allow these users to access the /Whatever/Drop directory?

Chroot the users to a common sftp root instead of their home directory
("/usr/sftpusers/" for example).  You will have to tell them to cd to
"/myusername" to write to their private directory, or "/Drop" to upload to
the common dropbox directory.

Another solution might be to leave everyone chrooted in their home
directories, create a /Drop directory in everyone's home dir, and have a
crom job that runs every 5 minutes or so that moves files in
/usr/sftpusers/*/Drop/ that are older than 5 minutes into your other dropbox
directory, where you can process them at your leisure.  This won't work if
they are supposed to be able to download files that other users have
uploaded, though.


-- 
	Dan Nelson
	dnelson@xxxxxxxxxxxxxxx

[Index of Archives]     [Open SSH Unix Development]     [Fedora Users]     [Fedora Desktop]     [Yosemite Backpacking]     [KDE Users]     [Gnome Users]

  Powered by Linux