Making shell account

[skeletal29]

Ok well i want to let some friends access my system throu telnet.I want them to be able to read and write in thei ftp and html folder adn thats it....and maybe some other commands...


now my question is : is ther a file that i can pick which commands they can run? adn is the a way i want make them not be able to read anythign else besides tehir folders? I dont wanna chmod each folder one by one....I want them to be able to run programs but is there a way i can restrict them from not being able to run harm ful progs(hacks)?

Is there a guide to making shell accounts?

 

[Barnaby W. Füi]

look around on linuxdoc.org and google, but the one thing i do know is that you do not want to use telnet. telnet is totally unsecure, anyone sniffing your machine could get their passwords. use SSH.

 

[skeletal29]

oh yea i was gonna say that but i just dint feel like complicating waht i was trying to ask....


I see that you are hosting sites you self.....is it ftp and http only or wat?

 

[skeletal29]

bump

 

[n0cmonkey]

chmod every program you dont want them to use. Look into trusted path execution patches for your kernel, and dont give out shell accounts to anyone you dont trust. This isnt easy, requires constant vigilence on your part (like look at the logs several times a day instead of never), and it probably wont be fun.

 

[Barnaby W. Füi]

i'm not hosting my site myself, i'm just having a friend sub-host me for a bit till i get my other machine working, and then i'll probably host it myself, until i get money for a real host. then again, it might just stay where it is. who knows.

 

[skeletal29]

ahh dam its gonna take a long time to chmod everything and by the way im not a "elite" linux user...isnt there a manual of some sort...i dont even know half of the progs on the system.

 

[n0cmonkey]

<< ahh dam its gonna take a long time to chmod everything and by the way im not a "elite" linux user...isnt there a manual of some sort...i dont even know half of the progs on the system. >>



Then its too early to hand out shell accounts. I wouldnt even do it. Linuxdoc.org has some great how-to's