如何把一个Linux用户限制到一个目录？

tongds

如何把一个Linux用户限制到一个目录？只可以在它的目录操作，而不可以操作其他目录，包括不能浏览其他目录，即对其他目录不可读。

另外，怎么让他在该目录只有编辑、修改文件等功能，不能执行其他对系统有影响的命令

谢谢

maluyao

讨论过很多次了，这是对Linux/Unix缺乏理解时，容易问的一个问题。

小公猫

原帖由 maluyao 于 2009-3-30 15:20 发表
讨论过很多次了，这是对Linux/Unix缺乏理解时，容易问的一个问题。

那就说清楚点呀，或者给个链接什么的
我也想学习一下~

vermouth

chroot ?

Celinde

不能浏览其他文件夹，他怎么执行命令？！
一个普通用户本来就只能在很有限的范围内创建、修改文件，本来也不能做什么对系统有害的操作。

小公猫

楼主说的可能是ftp

cst05001

user, group, 750, 700

靓仔天下

我是路过的，支持个先.......

jerrywjl

你去查查一个叫做rbash的东西，或许可以实现。

kns1024wh

rbash: restricted bash
RESTRICTED SHELL
If bash is started with the name rbash, or the -r option is supplied at invocation, the shell becomes restricted. A restricted shell is used to set up an environment more controlled than the standard shell. It behaves identically to bash with the exception that the following are disallowed or not performed:

changing directories with cd
setting or unsetting the values of SHELL, PATH, ENV, or BASH_ENV
specifying command names containing /
specifying a file name containing a / as an argument to the . builtin command
Specifying a filename containing a slash as an argument to the -p option to the hash builtin command
importing function definitions from the shell environment at startup
parsing the value of SHELLOPTS from the shell environment at startup
redirecting output using the >, >|, <>, >&, &>, and >> redirection operators
using the exec builtin command to replace the shell with another command
adding or deleting builtin commands with the -f and -d options to the enable builtin command
Using the enable builtin command to enable disabled shell builtins
specifying the -p option to the command builtin command
turning off restricted mode with set +r or set +o restricted.
These restrictions are enforced after any startup files are read.

When a command that is found to be a shell script is executed, rbash turns off any restrictions in the shell spawned to execute the script