PDA

View Full Version : /usr/bin/


Tripple2
24th September 2007, 02:59
I've been doing some reading about chroot and ISPconfig.

When I give users ssh access they can only use dircolors, groups, id, mysql, mysqldump, ssh, unzip and zip.

Is there any reason why they can't use a text editor like vi? This could be very usefull to adjust some config files. Or is there a security reason.

till
24th September 2007, 10:46
You can give your users any shell program you like by modifying the chrroting script /root/ispconfig/scripts/shell/create_chroot_env.sh

Genrally I don not see any security problems with vi.

mlz
24th September 2007, 14:13
One thing to consider, many users have a tough time using vi, you may want to add nano to your list, and perhaps put some ssh help pages up for common Unix(like) utilities. We typically include nano, crontab (with the correct setup to use nano), and mysql, in addition to what is already in the script.