Level: Intermediate

Jimmie Brewster (jbrew@us.ibm.com), AIX Level 2 Support, IBM
Stefan Kister (skister@de.ibm.com), Consulting IT Specialist, IBM
Jyoti B. Tenginakai (jyoti.b.t@in.ibm.com), Security Development, IBM

05 May 2008

Sometimes you might want to restrict users to specific directories so that they are not able to look into the whole system. This can be achieved by creating the chroot users. This article describes how to set up an IBM® AIX® chroot environment and use it with ssh, sftp, and scp. You will also learn about the prerequisites for AIX and openssh, and how to configure and use a chroot environment. A downloadable sample shell script that automatically sets up this environment is also provided.

Introduction

IBM-supported versions of OpenSSH (openssh-4.5 onwards) has included the chroot feature. It looks for "." (dot) in the user's home directory and then the chroot () call changes the root directory of the user so that the directory before "." (dot) becomes the chrooted directory. This article helps you set up a chroot environment on AIX and use it with ssh, sftp, and scp.

......

Please access the below link to view the full content.

Original link: http://www.ibm.com/developerwork...