Home / server / Questions / 72983
Accepted
Disco
Asked: 2009-10-10 07:25:11 +0800 CST

Create a tmp directory for each user

  • 772

I stumbled upon this page : http://www.wlug.org.nz/PerUserTempDirs

Suggesting to create/replace a few scripts; the latest step is more confusing :

Now once you have that in place, invoke the following script instead of login(1):

 #!/bin/sh
 mkdir -m 700 /tmp-safe/user/"$1" /tmp/"$1"
 chown "$1":  /tmp-safe/user/"$1" /tmp/"$1"
 mount --bind /tmp-safe/user/"$1" /tmp/"$1" || exit 1
 exec /bin/login "$@"

Since users login with ssh, i 'think' that /bin/login is never executed. What script should I modify to be able to re-mount /tmp for the user ?

ssh

2 Answers

  1. A better approach is to use pam_mktemp. This will create a per-user directory under /tmp when a user logs in via any pam service and updates TMP and TMPDIR to use that. This does rely on programs being written to not assume /tmp.

    • 3
  2. Best Answer

    The problem with pam_mktemp is, there are lots of software with hardcoded /tmp, and they do not honor the TMPDIR variable.

    "Namespaces" feature in recent kernels can be used for this, as explained in a blog post by a Gentoo developer.

    • 2