Restricting Users to Home Directories

[jlimited]

I am attempting to restricting users to Home Directories, but I the usually place where I would do that is not there.

Where does Cpanel create all of the virtual hosts at?

Should it be under:

httpd.conf
proftpd.conf

Thanks
Travis

 

[coastinc]

User's are restricted to their home directory....
If you are referring to SSH access, you can use Jailshell.

 

[chirpy]

One handy script is:

/scripts/enablefileprotect

Which offers some, if marginal, restriction. Of course non of this (including jailshell) has any effect on CGI perl and php scripts which can still view anything that is appropriately readable anywhere on the server.

 

[dazerrackers]

Is this restricting them in php? like to only there dir know one else's on the server.

 

[Sheldon]

WHM > Server Configuration > Tweak Security > mod_php_openbasedir tweak

or whatever that is..

enable that.. DONE

Sheldon

 

[chirpy]

True. But you, presumably, won't be getting rid of perl CGI. What these restrictions are for is to stop vulnerable scripts (php) from allowing hackers access to things you don't want them to have. None of these will stop a user with an account from accessing everything that the file/dir permissions allow. Don't get a false sense of security.