no directory access in linux

GO ILLINI · 10-09-2007, 03:59 AM

hey I'm running a centos 4.4 server and some of my friends have web accounts on it(just for fun). I was thinking of setting setting chmod to 751 on all of the root folders except for /home. Would this interfere with anything that linux does...?
The users just have a /home/username/public_html and /home/username/private folder, they dont do anything else.

751 does:
user can do everything
group can read and execute
others can just execute

I was thinking of doin this just so it looks cleaner... like so they cant see the whole server

Thanks,
-Adam

Edit: Am I right in thinking everything will be the same besides the ability to list files in the directories?

firepages · 10-10-2007, 06:01 AM

Quote:

like so they cant see the whole server

better to add the users to a chrooted jail, changing permissions arbitrarily is really not a good idea.

see this article for example

GO ILLINI · 10-10-2007, 12:48 PM

Thanks, That looks like it should work for me.

Quote:

changing permissions arbitrarily is really not a good idea

seemed like a good idea at the time

-Adam

oracleguy · 10-12-2007, 03:23 AM

Yeah, jail them to their home directory. Changing permissions system wide is probably going to end in disaster, lol.

GO ILLINI · 10-12-2007, 03:32 AM

ha eh... its just personal server i could use with a little bit of downtime.

after all... my users aren't actually paying me.
Jailing seems like it might be a little bit of work so ill get around to trying it sometime.

Thanks,

-Adam

oracleguy · 10-13-2007, 12:15 AM

What software are you using for your FTP server?

GO ILLINI · 10-13-2007, 02:12 AM

im using winscp(using ssh)

ralph l mayo · 10-13-2007, 02:47 AM

I'd probably just put them all in a virtual machine, where they can do what they please and it's easier to limit the resources they use.

GO ILLINI · 10-13-2007, 05:12 AM

well i figured its easier this way because i don't really care how much space they use or bandwidth... or anything. Its 4 people using a server that has space/processing power to support over 100.(got it free

)
virtual machine sure as hell sounds like more work then jailing.

-Adam

GO ILLINI · 11-29-2007, 03:12 AM

SOLVED

I posted my results along with a tutorial have made from my experiences here:
http://codingforums.com/showthread.p...801#post634801

Thank you all,
-Adam