How to grant secure access to an untrusted developer to an exisiting virtual host?

Posted by Margaret Thorpe on Server Fault See other posts from Server Fault or by Margaret Thorpe
Published on 2010-05-26T12:16:14Z Indexed on 2010/05/26 12:21 UTC
Read the original article Hit count: 309

Filed under:
|

Our security policy does not permit ftpd on our servers. Our trusted developers use ftps to access our webservers and they have full access to the server. How do we grant limited access to a single untrusted developer for an existing virtual host. Ive configured rssh to only allow sftp to our untrusted developer, but we dont want him browsing around our other sites. I've investigated chroot, but it seems overly complex and more for restricting access to their home folders. I want to limit access to /srv/www/vhostx/ and below.

Whats the best solution?

© Server Fault or respective owner

Related posts about ssh

Related posts about sftp