Security Basics mailing list archives

chroot vs rsh(restricted shell)


From: sreenath sarikonda <sreeredhat () yahoo com>
Date: Tue, 1 Jun 2004 11:44:23 -0700 (PDT)

Hi Everyone,

I am jr SysAdmin. I was asked to setup users such that
when they 
telnet and login they should not be able to browse any
other 
directories 
other than home directories.And also have limited
access to commands. 
Implementing restricted shell(usr/lib/rsh) is pretty
easy. But setting 
up 
chroot with telnet login is a bit difficult.We need to
run a setuid 
script to run the chroot command when a user logs in.
I am a newbie. I 
read 
that having setuid programs is insecure. So please
suggest me which is 
more secure . rsh or chroot.

Thank you
Sreenath.


        
                
__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/ 

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------


Current thread: