Limiting sFTP access
Clash Royale CLAN TAG#URR8PPP
up vote
2
down vote
favorite
A Raspberry pi is configured with OSMC behind a firewall. The router forwards WAN port 21 traffic to port 22 of the rPi. A guest user has been configured. Assume the username is guest and though not hostile, but 'inquisitive'
The user will be instructed to use WinSCP to get / put files to the home directory. Is there a simple command to prevent the guest from:
- from roaming through the raspberry pi's directories?
- issuing commands from the command line, other than those necessary to sFTP read & write to/home/guest?
The goal is to allow the guest to sFTP (read / write) files in /home/guest and no more. Maybe the right question to ask: is what is the minimum set of commands are needed to meet the goal? and how to lock down guest commands so that only those commands are enabled.
Any attempts to sharpen the question are appreciated. Thank you
permissions
asked Sep 5 at 20:11
gatorback
272111
add a comment |Â
up vote
2
down vote
favorite
A Raspberry pi is configured with OSMC behind a firewall. The router forwards WAN port 21 traffic to port 22 of the rPi. A guest user has been configured. Assume the username is guest and though not hostile, but 'inquisitive'
The user will be instructed to use WinSCP to get / put files to the home directory. Is there a simple command to prevent the guest from:
- from roaming through the raspberry pi's directories?
- issuing commands from the command line, other than those necessary to sFTP read & write to/home/guest?
The goal is to allow the guest to sFTP (read / write) files in /home/guest and no more. Maybe the right question to ask: is what is the minimum set of commands are needed to meet the goal? and how to lock down guest commands so that only those commands are enabled.
Any attempts to sharpen the question are appreciated. Thank you
permissions
asked Sep 5 at 20:11
gatorback
272111
add a comment |Â
up vote
2
down vote
favorite
up vote
2
down vote
favorite
A Raspberry pi is configured with OSMC behind a firewall. The router forwards WAN port 21 traffic to port 22 of the rPi. A guest user has been configured. Assume the username is guest and though not hostile, but 'inquisitive'
The user will be instructed to use WinSCP to get / put files to the home directory. Is there a simple command to prevent the guest from:
- from roaming through the raspberry pi's directories?
- issuing commands from the command line, other than those necessary to sFTP read & write to/home/guest?
The goal is to allow the guest to sFTP (read / write) files in /home/guest and no more. Maybe the right question to ask: is what is the minimum set of commands are needed to meet the goal? and how to lock down guest commands so that only those commands are enabled.
Any attempts to sharpen the question are appreciated. Thank you
permissions
asked Sep 5 at 20:11
gatorback
272111
A Raspberry pi is configured with OSMC behind a firewall. The router forwards WAN port 21 traffic to port 22 of the rPi. A guest user has been configured. Assume the username is guest and though not hostile, but 'inquisitive'
The user will be instructed to use WinSCP to get / put files to the home directory. Is there a simple command to prevent the guest from:
- from roaming through the raspberry pi's directories?
- issuing commands from the command line, other than those necessary to sFTP read & write to/home/guest?
The goal is to allow the guest to sFTP (read / write) files in /home/guest and no more. Maybe the right question to ask: is what is the minimum set of commands are needed to meet the goal? and how to lock down guest commands so that only those commands are enabled.
Any attempts to sharpen the question are appreciated. Thank you
permissions
permissions
asked Sep 5 at 20:11
gatorback
272111
asked Sep 5 at 20:11
gatorback
272111
edited Sep 5 at 21:52
asked Sep 5 at 20:11
gatorback
272111
asked Sep 5 at 20:11
gatorback
272111
asked Sep 5 at 20:11
gatorback
272111
272111
add a comment |Â
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f467123%2flimiting-sftp-access%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
