* Issues hiding /dev virtual directory from SFTP users @ 2017-11-27 21:22 snorthrop 2017-11-28 0:05 ` Andrey Repin 0 siblings, 1 reply; 4+ messages in thread From: snorthrop @ 2017-11-27 21:22 UTC (permalink / raw) To: cygwin Hello, I am trying to get sftp secured using OpenSSH. I have been able to jail the users to their home directory and remove the cygdrive virtual directory from showing but I have been unable to get the /dev virtual directory removed from the users when they SFTP. In the past I have been able to just add "/dev /null none bind" to the fstab file but that no longer works. Can anyone suggest how I may be able to accomplish this with CYGWIN_NT-6.3 and openssh 7.6p 1-1 ? Regards, Shad -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: Issues hiding /dev virtual directory from SFTP users 2017-11-27 21:22 Issues hiding /dev virtual directory from SFTP users snorthrop @ 2017-11-28 0:05 ` Andrey Repin 2017-11-28 12:50 ` [EXTERNAL] " snorthrop 0 siblings, 1 reply; 4+ messages in thread From: Andrey Repin @ 2017-11-28 0:05 UTC (permalink / raw) To: snorthrop, cygwin Greetings, snorthrop@moog.com! > Hello, > I am trying to get sftp secured using OpenSSH. I have been able to jail > the users to their home directory and remove the cygdrive virtual directory > from showing but I have been unable to get the /dev virtual directory > removed from the users when they SFTP. In the past I have been able to just > add "/dev /null none bind" to the fstab file but that no longer works. > Can anyone suggest how I may be able to accomplish this with CYGWIN_NT-6.3 and openssh 7.6p 1-1 ? If you jail the user to their home directory, they shouldn't be able to see the Cygwin root in first place. I don't understand your issue. -- With best regards, Andrey Repin Tuesday, November 28, 2017 02:58:54 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple ^ permalink raw reply [flat|nested] 4+ messages in thread
* RE: [EXTERNAL] Re: Issues hiding /dev virtual directory from SFTP users 2017-11-28 0:05 ` Andrey Repin @ 2017-11-28 12:50 ` snorthrop 2017-11-28 14:27 ` Corinna Vinschen 0 siblings, 1 reply; 4+ messages in thread From: snorthrop @ 2017-11-28 12:50 UTC (permalink / raw) To: cygwin Andrey, They are not able to see the cygdrive. They are able to see the /dev virtual directory and all of the device mounts within it. Regards, Shad -----Original Message----- From: Andrey Repin [mailto:anrdaemon@yandex.ru] Sent: Monday, November 27, 2017 7:00 PM To: Northrop, Shad <snorthrop@moog.com>; cygwin@cygwin.com Subject: [EXTERNAL] Re: Issues hiding /dev virtual directory from SFTP users Greetings, snorthrop@moog.com! > Hello, > I am trying to get sftp secured using OpenSSH. I have been able to jail > the users to their home directory and remove the cygdrive virtual directory > from showing but I have been unable to get the /dev virtual directory > removed from the users when they SFTP. In the past I have been able to just > add "/dev /null none bind" to the fstab file but that no longer works. > Can anyone suggest how I may be able to accomplish this with CYGWIN_NT-6.3 and openssh 7.6p 1-1 ? If you jail the user to their home directory, they shouldn't be able to see the Cygwin root in first place. I don't understand your issue. -- With best regards, Andrey Repin Tuesday, November 28, 2017 02:58:54 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [EXTERNAL] Re: Issues hiding /dev virtual directory from SFTP users 2017-11-28 12:50 ` [EXTERNAL] " snorthrop @ 2017-11-28 14:27 ` Corinna Vinschen 0 siblings, 0 replies; 4+ messages in thread From: Corinna Vinschen @ 2017-11-28 14:27 UTC (permalink / raw) To: cygwin [-- Attachment #1: Type: text/plain, Size: 1702 bytes --] Please, don't top-post. On Nov 28 12:50, snorthrop@moog.com wrote: >> From: Andrey Repin [mailto:anrdaemon@yandex.ru] >> Sent: Monday, November 27, 2017 7:00 PM >> To: Northrop, Shad <snorthrop@moog.com>; cygwin@cygwin.com >> Subject: [EXTERNAL] Re: Issues hiding /dev virtual directory from SFTP users >> >> Greetings, snorthrop@moog.com! >> >> > Hello, >> >> > I am trying to get sftp secured using OpenSSH. I have been able to jail >> > the users to their home directory and remove the cygdrive virtual directory >> > from showing but I have been unable to get the /dev virtual directory >> > removed from the users when they SFTP. In the past I have been able to just >> > add "/dev /null none bind" to the fstab file but that no longer works. >> >> > Can anyone suggest how I may be able to accomplish this with CYGWIN_NT-6.3 and openssh 7.6p 1-1 ? >> >> If you jail the user to their home directory, they shouldn't be able to see >> the Cygwin root in first place. >> I don't understand your issue. > > Andrey, > > They are not able to see the cygdrive. They are able to see the /dev > virtual directory and all of the device mounts within it. And why do you want to remove that? There's nothing in /dev your users shouldn't see, but there's stuff in there required for certain functionality. For instance, bash handles /dev/std{in,out,err} and people may rely on this. Also, any application using the default paths for POSIX shmem, semaphores and message queues will stop working. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 819 bytes --] ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2017-11-28 14:27 UTC | newest] Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2017-11-27 21:22 Issues hiding /dev virtual directory from SFTP users snorthrop 2017-11-28 0:05 ` Andrey Repin 2017-11-28 12:50 ` [EXTERNAL] " snorthrop 2017-11-28 14:27 ` Corinna Vinschen
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).