Home / server / Questions / 137031
Accepted
Simon
Asked: 2010-04-30 06:17:46 +0800 CST

Lock down SFTP access on OpenSolaris

  • 772

I have an OpenSolaris 2009.06 server and I'd like to enable a user to remotely change files in a specific directory, ideally via SFTP or FTP-via-SSH. This user does not yet have an account on the machine and I'd like to create it so it's as restricted as possible. Is there a canonical way of doing this? I know about OpenSolaris' role-based access control and authorizations model, but I figure it's a lot of work (i.e., a lot I can mess up) to really lock down a full-blown user account (prevent fork bombs, make sure there's really no other file in the file system which can be written to...). Any hint is greatly appreciated.

Thanks, Simon

security sftp opensolaris

1 Answers

  1. Best Answer

    rssh is probably what you want.

    It's a restricted shell with just enough functionality for file transfers and nothing else.

    • 1