=== m1dnight1 is now known as m1dnight_ === Monthrect is now known as Piper-Off [03:29] quick question [03:29] how to make user login DIRECTLY in his home directory and not anywhere else @ ssh [03:41] Holler, http://allanfeid.com/content/creating-chroot-jail-ssh-access [08:51] Good morning. [08:52] gd mrnng [08:53] ;) [08:53] gss vwls wll cm ltr [08:54] Haven't had enough coffee for that sentence :P [08:58] (guess vowels will come later) [08:59] Ah, there they are :P [08:59] woke up too early - it's a day off before a day off before new year's eve and a weekend [09:19] jamespage: hello, any idea when can I install mitaka on trusty with proposed repo? [10:39] EmilienM: don't know, but is that the "4D universe modeler"? [10:39] http://4d2u.nao.ac.jp/html/program/mitaka/index_E.html === CiPi is now known as cipi === Piper-Off is now known as Monthrect === cipi is now known as CiPi [12:37] EmilienM, hopefully by end of next week [14:17] yeah... i'm back [14:18] How can I make the user login in his own home directory and not anywhere else? How can I be sure? [14:18] A login requires more than just the home directory (shell, userspace tools, etc), so no. [14:20] Can I understand more about shells? [14:20] Yes. [14:20] That would be a good starting point. [14:20] One more thing [14:21] Ever heard of GADMIN-PROFTPD? [14:21] Are you talking about ftps for file transfers and not login (i.e. ssh or local)? [14:22] Then chroot is the thing to setup support for [14:22] Yeah, there's a problem with gadmin-proftpd, it says no uppercase letters allowed but I don't have any uppercase letters anywhere in settings... [14:22] weird [14:25] just don't use ftp === mist is now known as lolcat6 [14:25] What about doing all that restrictions in openssh? Is it difficult? [14:26] Holler: you can setup chroot with openssh, but what's the point? just set the permissions right and the user can't do much anyway === lolcat6 is now known as mist [14:26] Yep, I tried permissions yesterday [14:26] If you may, I can tell you what went wrong [14:26] "tried"? [14:27] Yep, experimented [14:27] chmod go-rwx -R /home [14:27] and ta-taa - no users can read any other users' data [14:31] well that might work but my problem extends more than that, I there are folders other than user's home that I want them to access and not access [14:31] I must manually do it [14:48] Holler: the default system config is rather secure as it is - what sort of other folders? [14:51] game server files in home [14:51] I want them to access SOME files, not all [15:12] Holler: then set the permissions correctly ;) [15:12] Holler: if you chroot the user to $HOME, they won't have any chance of accessing /home/somewhereelse [15:13] or *anywhere* else outside $HOME [15:23] oh no [15:23] what should I do to make them only access /home/somewhere/thisthing on logging in? === Lcawte|Away is now known as Lcawte [22:07] I plugged the second network card on a few servers into a second switch. The main NIC is 172.16.1.2 and my router is plugged into that switch. I've tried to configure my second network card as 10.0.0.2 but when I do ifconfig eth1 10.0.0.2 netmask 255.255.255.0, I lose all network connectivity. How should I configure my second network card to be on a second LAN and not mow my eth0 traffic over? === Lcawte is now known as Lcawte|Away