[scponly] Scponlyc chroot confusion.

Kaleb Pederson kpederson at mail.ewu.edu
Mon Apr 25 16:15:53 EDT 2005


On Friday 22 April 2005 10:02 pm, GBloomberg wrote:
> Actually, I don't know if this is possible but I would like to
> automatically place the user in /home/scponly/incoming once they
> login. And not allow them out of that directory or to see anything in
> that directory but the files that, They, the user places in that
> directory.

I'm not sure if I understand all of your requirements.  You can't really 
prevent them from seeing the files in the chroot which are required for the 
chroots operation.  You might be able to get pretty close by disallowing read 
access to the directories but still allowing descend access.  Thus, if they 
were to try to 'cd ..' they wouldn't be able to get a file list.  This might 
be sufficient.  But then again, if they can only see the chroot, maybe that 
is sufficient?

Do you want to have many different users using distinct accounts?  Should all 
the users have a different upload directory?  It almost sounds like you want 
distinct accounts, but want to share a common upload directory?  This is 
possible (see --with-default-chdir if they all need to go to the same 
directory).  However, if they share a upload directory, you can't really 
prevent them from seeing the files that other people upload.  You could 
prevent them from reading the files, but that's about it....

Good luck.

--Kaleb



More information about the scponly mailing list