no directory access in linux

GO ILLINI · 10-09-2007, 03:59 AM

hey I'm running a centos 4.4 server and some of my friends have web accounts on it(just for fun). I was thinking of setting setting chmod to 751 on all of the root folders except for /home. Would this interfere with anything that linux does...?
The users just have a /home/username/public_html and /home/username/private folder, they dont do anything else.

751 does:
user can do everything
group can read and execute
others can just execute

I was thinking of doin this just so it looks cleaner... like so they cant see the whole server

Thanks,
-Adam

Edit: Am I right in thinking everything will be the same besides the ability to list files in the directories?

firepages · 10-10-2007, 06:01 AM

Quote:

like so they cant see the whole server

better to add the users to a chrooted jail, changing permissions arbitrarily is really not a good idea.

see this article for example

GO ILLINI · 10-10-2007, 12:48 PM

Thanks, That looks like it should work for me.

Quote:

changing permissions arbitrarily is really not a good idea

seemed like a good idea at the time

-Adam

oracleguy · 10-12-2007, 03:23 AM

Yeah, jail them to their home directory. Changing permissions system wide is probably going to end in disaster, lol.

GO ILLINI · 10-12-2007, 03:32 AM

ha eh... its just personal server i could use with a little bit of downtime.

after all... my users aren't actually paying me.
Jailing seems like it might be a little bit of work so ill get around to trying it sometime.

Thanks,

-Adam

oracleguy · 10-13-2007, 12:15 AM

What software are you using for your FTP server?

GO ILLINI · 10-13-2007, 02:12 AM

im using winscp(using ssh)

ralph l mayo · 10-13-2007, 02:47 AM

I'd probably just put them all in a virtual machine, where they can do what they please and it's easier to limit the resources they use.

GO ILLINI · 10-13-2007, 05:12 AM

well i figured its easier this way because i don't really care how much space they use or bandwidth... or anything. Its 4 people using a server that has space/processing power to support over 100.(got it free

)
virtual machine sure as hell sounds like more work then jailing.

-Adam

GO ILLINI · 11-29-2007, 03:12 AM

SOLVED

I posted my results along with a tutorial have made from my experiences here:
http://codingforums.com/showthread.p...801#post634801

Thank you all,
-Adam

10-09-2007, 03:59 AM	PM User \| #1
GO ILLINI Regular Coder Join Date: Jun 2005 Location: USA Posts: 634 Thanks: 0 Thanked 7 Times in 7 Posts	no directory access in linux hey I'm running a centos 4.4 server and some of my friends have web accounts on it(just for fun). I was thinking of setting setting chmod to 751 on all of the root folders except for /home. Would this interfere with anything that linux does...? The users just have a /home/username/public_html and /home/username/private folder, they dont do anything else. 751 does: user can do everything group can read and execute others can just execute I was thinking of doin this just so it looks cleaner... like so they cant see the whole server Thanks, -Adam Edit: Am I right in thinking everything will be the same besides the ability to list files in the directories? __________________ Why not thank me? http://adamsworld.name Last edited by GO ILLINI; 10-09-2007 at 04:02 AM..

10-12-2007, 03:23 AM	PM User \| #4
oracleguy The Spaminator Join Date: Jun 2002 Location: USA Posts: 8,004 Thanks: 1 Thanked 199 Times in 195 Posts	Yeah, jail them to their home directory. Changing permissions system wide is probably going to end in disaster, lol. __________________ OracleGuy My Blog "... the VP of our third biggest account started sweating bullets in our latest project status conference when Roy stood up and asserted: 'We don’t code our products for SMACKTARDS.'" - Daily Victim #564

10-12-2007, 03:32 AM	PM User \| #5
GO ILLINI Regular Coder Join Date: Jun 2005 Location: USA Posts: 634 Thanks: 0 Thanked 7 Times in 7 Posts	ha eh... its just personal server i could use with a little bit of downtime. after all... my users aren't actually paying me. Jailing seems like it might be a little bit of work so ill get around to trying it sometime. Thanks, -Adam __________________ Why not thank me? http://adamsworld.name

10-13-2007, 12:15 AM	PM User \| #6
oracleguy The Spaminator Join Date: Jun 2002 Location: USA Posts: 8,004 Thanks: 1 Thanked 199 Times in 195 Posts	What software are you using for your FTP server? __________________ OracleGuy My Blog "... the VP of our third biggest account started sweating bullets in our latest project status conference when Roy stood up and asserted: 'We don’t code our products for SMACKTARDS.'" - Daily Victim #564

10-13-2007, 02:12 AM	PM User \| #7
GO ILLINI Regular Coder Join Date: Jun 2005 Location: USA Posts: 634 Thanks: 0 Thanked 7 Times in 7 Posts	im using winscp(using ssh) __________________ Why not thank me? http://adamsworld.name

10-13-2007, 02:47 AM	PM User \| #8
ralph l mayo Regular Coder Join Date: Nov 2005 Posts: 951 Thanks: 1 Thanked 31 Times in 29 Posts	I'd probably just put them all in a virtual machine, where they can do what they please and it's easier to limit the resources they use.

10-13-2007, 05:12 AM	PM User \| #9
GO ILLINI Regular Coder Join Date: Jun 2005 Location: USA Posts: 634 Thanks: 0 Thanked 7 Times in 7 Posts	well i figured its easier this way because i don't really care how much space they use or bandwidth... or anything. Its 4 people using a server that has space/processing power to support over 100.(got it free ) virtual machine sure as hell sounds like more work then jailing. -Adam __________________ Why not thank me? http://adamsworld.name

11-29-2007, 03:12 AM	PM User \| #10
GO ILLINI Regular Coder Join Date: Jun 2005 Location: USA Posts: 634 Thanks: 0 Thanked 7 Times in 7 Posts	SOLVED I posted my results along with a tutorial have made from my experiences here: http://codingforums.com/showthread.p...801#post634801 Thank you all, -Adam __________________ Why not thank me? http://adamsworld.name

Thread Tools
Show Printable Version Email this Page
Rate This Thread
Rate This Thread: