How can I prevent access outside shared folder with winscp

ariwur · 23. Januar 2015

I have activated the SSH service in OMV for use with backups via the internet. This works fine. I use a directory homes for the user folders and access rights for these folders work properly (users can only enter their own folder, not those of other users).

My problem is that users can also log in with for example WinSCP. The problem is that they can then enter directory levels above homes, right up to the root directory. How can I block this?

Thanks,
Ariwur

ryecoaaron · 23. Januar 2015

You can't block it BUT they can't access files/folders they don't have permissions on. For example, while they can see the root directory, they can't access the /root folder. They can't delete /usr. If you don't want users accessing a folder/file, change the permissions.

ariwur · 23. Januar 2015

Thanks ryecoaaron. I just tried and you're right: they can see everything up to the root but they cannot 'touch' it. I should have tried first...
I suppose I have to use command-line linux to change this?

Regards,
Ariwur

ryecoaaron · 23. Januar 2015

Command line to change permissions? The standard permissions won't let a user do anything bad to the system. They can delete data if they have privileges to it. Is there something in particular, you don't want them to see?

ariwur · 24. Januar 2015

Hi, I'm not really concerned about users doing something bad. All I want is to prevent them getting confused if they use WinSCP and end up somewhere outside their own home directory. If they get confused, they're going to bother me...

ryecoaaron · 24. Januar 2015

Typically, winscp starts in the user's home directory when logging in.

tiste · 30. Januar 2015

Hello,

Maybe you can remove the others rights to read the folder.
For instance, you can try with your own home directory.

Remove the "read" for others :

Code

chmod -R o-r /home/yourhome

Log in with another user account (here is usertest) and try to list it :

Code

[usertest@hostname root]$ ls -al /home/yourhome/
ls: cannot open directory /home/yourhome/: Permission denied

Hope it could help

How can I prevent access outside shared folder with winscp

Jetzt mitmachen!

Tags