Click to See Complete Forum and Search --> : General security questions


extatic
02-24-2005, 03:42 PM
I have a few questions about security.
I am running FreeBSD 5.3. I have created a few logons for friends who are running websites. The only thing they need to access is public_html in their home directory.
Is there anyway i can make them have very limited access, such as not allowing them to leave their home directory, no using gcc, perl, or running any kind of programs/scripts?

Also, in /usr/local/www/data/phpBB2 there is a config.php file which contains the mysql db root password, but others must be able to read it for the site to work. Is there anything i can do about this?... perhaps only allowing root to use mysql, or specified users... this goes back to restricting certain commands again.

Any help would be appreciated.. thanks.

ph34r
02-24-2005, 04:09 PM
Look into using a chroot jail

techwise
02-24-2005, 04:47 PM
there is a "restricted" feature on the user account. I just know of it, you will have to read the docs on it.

Mike