X-Spam-Check-By: sourceware.org
Message-ID: <45E48AAA.5020004@cygwin.com>
Date: Tue, 27 Feb 2007 14:46:50 -0500
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.9) Gecko/20061221 Fedora/1.5.0.9-1.fc4.remi Thunderbird/1.5.0.9 Mnenhy/0.7.4.0
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Remove user access to local drives?
References: <loom DOT 20070227T203610-344 AT post DOT gmane DOT org>
In-Reply-To: <loom.20070227T203610-344@post.gmane.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Francis wrote:
> I am running a OpenSSH server for some friends on my machine, and I was hoping 
> to disable access to /cygdrive (local drives.)  Is there a way to prevent them 
> from modifying any files also?  this is intended just as a SSH tunneling method 
> to get us around some Websense.


This ones up with some frequency.  The answer is you can't prevent the
user from going, seeing, and modifying in 'ssh' anything that they can go,
see, and modify in Windows.  So if you lock down the permissions of the
unwanted paths/files in Windows, your 'ssh' users will be restricted as
you want.


-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/