You can use a combination of “jailkit” and pam’s chroot module for this, we’ll jail user “rdpm” in this example.
\nFirst, get jailkit from http:\/\/olivier.sessink.nl\/jailkit\/ , build it and install it
\nNow, create a generic jail
\njk_init -v \/home\/jail sftp scp ssh jk_lsh basicshell
\nlet’s now create the user “rdpm”
\nuseradd -m -d \/home\/rdpm -g 10 rdpm
\npasswd rdpm
\nWe want this to work only for ssh, so let’s add a line to \/etc\/pam.d\/sshd to load the chroot module
\nsession required pam_chroot.so debug
\nso, now let’s make rdpm’s home inside the jail directory
\nmkdir \/home\/jail\/home\/rdpm
\nchown rdpm \/home\/jail\/home\/rdpm
\nYou may, if you want so, mount loopback his real home dir into the jail:
\nmount –bind \/home\/rdpm \/home\/jail\/home\/rdpm
\nAnd you may also make that bind mount permanent:
\n69\/433
\necho “\/home\/rdpm \/home\/jail\/home\/rdpm bind defaults,bind 0 0” >> \/etc\/fstab
\nlet’s copy rdpm’s auth info into the jail
\ngrep rdpm \/etc\/passwd >> \/home\/jail\/etc\/passwd
\ngrep rdpm \/etc\/shadow >> \/home\/jail\/etc\/shadow
\nLet’s configure the chroot pam module
\necho “rdpm \/home\/jail” >> \/etc\/security\/chroot.conf
\nand that’s all, now “ssh rdpm@yourserver” and you’ll find urself in a jail
\n70\/433<\/p>\n","protected":false},"excerpt":{"rendered":"
You can use a combination of “jailkit” and pam’s chroot module for this, we’ll jail user “rdpm” in this example. First, get jailkit from http:\/\/olivier.sessink.nl\/jailkit\/ , build it and install it Now, create a generic jail jk_init -v \/home\/jail sftp scp ssh jk_lsh basicshell let’s now create the user “rdpm” useradd -m -d \/home\/rdpm -g […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-539","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts\/539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=539"}],"version-history":[{"count":0,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts\/539\/revisions"}],"wp:attachment":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=539"},{"taxonomy":"post_tag","embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}