Disk access and security

3 posts / 0 new
Last post
Anonymous
Disk access and security

I read your FAQ on restricting a user to their home directory.

The concern I have with that is restricting read/write access to  various other locations when I link them in the users home directory.

If I create a user who only has home directory access, and create links to various hard drive locations, will the user be restricted becaause the windows user is restricted?

Example.

  1. Password login is disabled.
  2. I follow you procedure so that USER has only access to it's home directory.
  3. I remove the ssh key for the admin user so no login from outside can occur through that privilaged user.
  4. I create links to various other drive locations in USER's home directory.

Will USER be able to read write those directories?

Is there a way to guide what hard drives/directories get mapped into cygdrive instead?

The latter would be better really.

Thanx for any help.

Steven 

itefix
Offline
Last seen: 15 hours 11 min ago
Joined: 01.05.2008 - 21:33
Re: Disk access and security

If I create a user who only has home directory access, and create links to various hard drive locations, will the user be restricted becaause the windows user is restricted?

Example.

  1. Password login is disabled.
  2. I follow you procedure so that USER has only access to it's home directory.
  3. I remove the ssh key for the admin user so no login from outside can occur through that privilaged user.
  4. I create links to various other drive locations in USER's home directory.

Will USER be able to read write those directories?

It depends on the NTFS permissions entitled to the user at the target directories.

Is there a way to guide what hard drives/directories get mapped into cygdrive instead?

No, I'm afraid.

neo314
Re: Disk access and security

I managed to accomplish what I wanted using NTFS permissions. Thank you for your work on this project and your reply. I hoped to find a way to map what to show instead of having to go through and set everything that should not be seen, and I couldn't figure out a way to hide elements that I want the user to not even see (e.g. a directory listing where the user has access to only 2 of 10 directories) since the parent dir/disk had to allow file listing in order to see the allowed directories.

Still it got me what I was seeking. Thanx! 

Release announcements