[no subject]

Joe Sechman wrote:
> 
> This actually reminds me of a personal BOFH story when one of our
> users thought it would be *convenient* to 'chmod 777' his home
> directory to *share* files....it worked for that session, but then he
> couldn't re-auth b/c his ssh home-dir permissions were too liberal. 
> It sure was fun to *re-educate*... meet chattr!
> 

hahaha... Riight... Share a folder in the home-dir by making it 777 but
keep the home-dir at 0711.  If were talking about user 'jack', then this
prevents someone from seeing their directory, but permitted to visit the
share directory (if they know it's name):

mtrausch at ibm-mtrausch:~$ cd /home/jack
mtrausch at ibm-mtrausch:/home/jack$ ls -l
/usr/bin/ls: .: Permission denied
mtrausch at ibm-mtrausch:/home/jack$ cd dir
mtrausch at ibm-mtrausch:/home/jack/dir$ ls -l
total 0
mtrausch at ibm-mtrausch:/home/jack/dir$

	- Mike

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - <a  rel="nofollow" href="http://enigmail.mozdev.org";>http://enigmail.mozdev.org</a>

iD8DBQFCp0TEPXInbkqM7nwRA0lMAJ9NMWFZn8GW1MBT7D8wu4ZoQ5hrjQCgnUi6
JiJka4B3gHRY04zM/nknUc0=
=42Md
-----END PGP SIGNATURE-----


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00360" href="msg00360.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> f.grant.robertson at gmail.com (Grant Robertson)</li></ul></li>
<li><strong><a name="00363" href="msg00363.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> fd0man at gmail.com (Michael B. Trausch)</li></ul></li>
<li><strong><a name="00376" href="msg00376.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> joe.sechman at gmail.com (Joe Sechman)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00379.html">[ale] klogd and syslogd hanging</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00381.html">[ale] Re: erasing ext3 filesystems securely</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00376.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00365.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00380"><strong>Date</strong></a></li>
<li><a href="threads.html#00380"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>