<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Chroot ? Much better?<br><br>Sent from my iPhone</div><div><br>On May 15, 2015, at 20:09, Loganaden Velvindron <<a href="mailto:gnukid1@yahoo.co.uk">gnukid1@yahoo.co.uk</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:14px"><div id="yui_3_16_0_1_1431719410980_2983">Dear Yuv,</div><div id="yui_3_16_0_1_1431719410980_2981"><br></div><div dir="ltr" id="yui_3_16_0_1_1431719410980_2982">Please set a User/Match rule in sshd for this user and disable PTY allocation using:</div><dl id="yui_3_16_0_1_1431719410980_3959" class="list list-tag"><dt id="yui_3_16_0_1_1431719410980_3958" class="" style="margin-top: 1.00em;"><br></dt></dl><div id="yui_3_16_0_1_1431719410980_4468">
<b style="" class="">PermitTTY 0.</b></div><div id="yui_3_16_0_1_1431719410980_4469"><br></div><div id="yui_3_16_0_1_1431719410980_4470"><b id="yui_3_16_0_1_1431719410980_4983" style="" class="">No TTY allocation doesn't allow a user to run a shell. He can only tunnel :)</b></div><div id="yui_3_16_0_1_1431719410980_4471"><br></div><div id="yui_3_16_0_1_1431719410980_4472"><b style="" class=""><br></b></div><dl id="yui_3_16_0_1_1431719410980_3959" class="list list-tag"><dt id="yui_3_16_0_1_1431719410980_3958" class="" style="margin-top: 1.00em;"><br></dt></dl><dl id="yui_3_16_0_1_1431719410980_3959" class="list list-tag"><dt id="yui_3_16_0_1_1431719410980_3958" class="" style="margin-top: 1.00em;"><br></dt><dt id="yui_3_16_0_1_1431719410980_3962" class="list-tag" style="margin-top: 1.00em;"><br></dt></dl><div dir="ltr">
</div><dl id="yui_3_16_0_1_1431719410980_4982" style="" class=""><dt id="yui_3_16_0_1_1431719410980_4981" class="" style="margin-top: 1.00em;"><br></dt></dl><div id="yui_3_16_0_1_1431719410980_2980"><span></span></div> <br><div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 14px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> On Thursday, 14 May 2015, 14:01, Yuv Joodhisty <<a href="mailto:locustv2@gmail.com">locustv2@gmail.com</a>> wrote:<br> </font> </div> <br><br> <div class="y_msg_container"><div id="yiv2190250609"><div><div dir="ltr">I prefer SSH Tunneling also and it is easier to configure than a VPN.<div><br clear="none"></div><div>But i have some question though. Let's say you have a small server and other users need to access it via ssh tunneling. Is there any way to create a very limited user on linux for this purpose? A user who cannot do any root commands, sudo su, etc.., or even cannot do anything at all. I don;t know much about user administration on linux.</div><div><br clear="none"></div><div>Thanks<br clear="none">Yuv</div></div><div class="yiv2190250609gmail_extra"><br clear="none"><div class="yiv2190250609gmail_quote">On Thu, May 7, 2015 at 10:24 AM, selven <span dir="ltr"><<a rel="nofollow" shape="rect" ymailto="mailto:pcthegreat@gmail.com" target="_blank" href="mailto:pcthegreat@gmail.com">pcthegreat@gmail.com</a>></span> wrote:<br clear="none"><blockquote class="yiv2190250609gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="yiv2190250609yqt7340230510" id="yiv2190250609yqt33164"><div dir="ltr">I prefer to do tunneling via ssh that to fiddle with anything vpn, though i don't do these for users. Mostly for private use. <br clear="none"><div><div class="yiv2190250609gmail_extra"><br clear="none"><div class="yiv2190250609gmail_quote"><div><div class="yiv2190250609h5">On Wed, May 6, 2015 at 8:04 PM, Yuv Joodhisty <span dir="ltr"><<a rel="nofollow" shape="rect" ymailto="mailto:locustv2@gmail.com" target="_blank" href="mailto:locustv2@gmail.com">locustv2@gmail.com</a>></span> wrote:<br clear="none"></div></div><blockquote class="yiv2190250609gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div class="yiv2190250609h5"><div dir="ltr">Hey guys, what do you think about SSH Tunneling, a.k.a Poor Techie's VPN vs VPN. Anyone here got experience in using any of these want to share some thoughts?<div><br clear="none"></div><div>Regards<span><font color="#888888"><br clear="none">Yuv</font></span></div></div>
<br clear="none"></div></div>__________________________________________________________<br clear="none">
Linux User Group of Mauritius (LUGM) Discuss mailing list<br clear="none">
Website: <a rel="nofollow" shape="rect" target="_blank" href="http://lugm.org/">http://lugm.org</a><br clear="none">
Mailing list archive: <a rel="nofollow" shape="rect" target="_blank" href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a><br clear="none">
Forum: <a rel="nofollow" shape="rect" target="_blank" href="http://lugm.org/forum/">http://lugm.org/forum/</a><br clear="none">
IRC: #<a rel="nofollow" shape="rect" target="_blank" href="http://linux.mu/">linux.mu</a> on Freenode<span class="yiv2190250609HOEnZb"><font color="#888888"><br clear="none"></font></span></blockquote></div><span class="yiv2190250609HOEnZb"><font color="#888888"><br clear="none"><br clear="all"><br clear="none">-- <br clear="none"></font></span><div><div dir="ltr"><div style="margin:0in 0in 0pt;"><b><span style="color:#262626;font-size:10pt;" lang="EN-GB">Pirabarlen Cheenaramen </span></b><span style="color:#262626;font-size:10pt;" lang="EN-GB">| $3|v3n<b> </b></span></div>
<div style="margin:0in 0in 0pt;"><font color="#404040"><span style="font-size:11px;"><span lang="EN-GB"></span>L'escalier</span></font></div>
<div style="margin:0in 0in 0pt;"><span style="color:#404040;font-size:8pt;" lang="EN-GB">mobile: +230 549 24 918</span></div>
<div style="margin:0in 0in 0pt;"><span style="color:#1f497d;font-size:8pt;" lang="EN-GB"><a rel="nofollow" shape="rect" ymailto="mailto:god@hackers.mu" target="_blank" href="mailto:god@hackers.mu"></a></span></div>
<div style="margin:0in 0in 0pt;"><span style="color:rgb(31,73,125);font-size:8pt;" lang="EN-GB"><a rel="nofollow" shape="rect" target="_blank" href="http://thegodof.net/">blog</a> || <a rel="nofollow" shape="rect" target="_blank" href="http://godify.me/">fb</a> || <a rel="nofollow" shape="rect" target="_blank" href="http://hackers.mu/pgpselven.txt">pgp</a><br clear="none"></span></div><div style="margin:0in 0in 0pt;"><span style="color:#1f497d;font-size:8pt;" lang="EN-GB"></span></div>
<div style="margin:0in 0in 0pt;"><span style="color:rgb(31,73,125);font-size:11px;">/*memory is like prison*/ (user==selven)?free(user):user=malloc(sizeof(brain));</span></div>
<div style="margin:0in 0in 0pt;"><span style="color:#1f497d;font-size:8pt;" lang="EN-GB"></span><span style="font-family:Webdings;color:#336600;font-size:8pt;" lang="EN-GB">P </span><span style="color:#336600;font-size:8pt;" lang="EN-GB">Save electricity & disk space. Cat this mail to >/dev/null 2>&1 after use.<br clear="none"></span><span style="color:#1f497d;font-size:8pt;" lang="EN-GB"></span></div></div></div>
</div></div></div></div>
<br clear="none">__________________________________________________________<br clear="none">
Linux User Group of Mauritius (LUGM) Discuss mailing list<br clear="none">
Website: <a rel="nofollow" shape="rect" target="_blank" href="http://lugm.org/">http://lugm.org</a><br clear="none">
Mailing list archive: <a rel="nofollow" shape="rect" target="_blank" href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a><br clear="none">
Forum: <a rel="nofollow" shape="rect" target="_blank" href="http://lugm.org/forum/">http://lugm.org/forum/</a><br clear="none">
IRC: #<a rel="nofollow" shape="rect" target="_blank" href="http://linux.mu/">linux.mu</a> on Freenode<br clear="none"></blockquote></div><br clear="none"></div></div></div><br><div class="yqt7340230510" id="yqt68575">__________________________________________________________<br clear="none">Linux User Group of Mauritius (LUGM) Discuss mailing list<br clear="none">Website: <a shape="rect" href="http://lugm.org/" target="_blank">http://lugm.org</a><br clear="none">Mailing list archive: <a shape="rect" href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/" target="_blank">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a><br clear="none">Forum: <a shape="rect" href="http://lugm.org/forum/" target="_blank">http://lugm.org/forum/</a><br clear="none">IRC: #linux.mu on Freenode</div><br><br></div> </div> </div> </div></div></div></blockquote><blockquote type="cite"><div><span>__________________________________________________________</span><br><span>Linux User Group of Mauritius (LUGM) Discuss mailing list</span><br><span>Website: <a href="http://lugm.org">http://lugm.org</a></span><br><span>Mailing list archive: <a href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a></span><br><span>Forum: <a href="http://lugm.org/forum/">http://lugm.org/forum/</a></span><br><span>IRC: #linux.mu on Freenode</span></div></blockquote></body></html>