JailShell Access

[ic0de]

I would like to restrict some of the commands that are allowed in the jailshell + some of the directory. Can someone help me with it? atm anyone who has jailshell can view edit /etc/passwd file also. hence i wanna fix thing in my server. any help appreciated.

Thanks

 

[garrettp]

If non-root users have access to modify /etc/passwd you've got some larger problems on your hands. That file should have 0644 root:root permissions, meaning normal users will have read-only access. Further, /etc/shadow for instance should be 0600 root:root.

If you're really worried about your users doing malicious things, it's best to not give them shell access at all; even a jailshell can be broken out of.