Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

During the installation phase there is an extra user account created other than root.

Since I use SU to stop brute force attacks through SSH I have chosen this user to do SSH. But apparently that account can traverse the file structure. Questions:

  • Does using that user for SSH create a security hole?
  • Can/should I restrict this user's permissions and in what way?
  • Should I create another user?
share|improve this question
    
Why all the minus points????? –  Cudos Nov 4 '09 at 20:46
    
Cudos: Not sure, the question could be phrased in a better way, but still it's useful. +1 –  Tomasz Zieliński Jul 3 '11 at 13:25

1 Answer 1

up vote 4 down vote accepted

The user created during the installation process of Debian has no special privileges. What do you mean by "traverse the file structure" ? Navigation in the file system is normal for any user on a UNIX system (ie, read access to /var, /etc and so on). This does not pose a security issue as long as you are careful not to let users have read access to sensitive configuration files (ie, containing passwords).

Creating another user won't change the issue in any way.

If you wish to restrict access to the file system to users logging in through SSH, you should take a look at the ChrootDirectory configuration option of OpenSSHd.

share|improve this answer
    
Okay. Yes, I was worried that the user could see /etc /var etc. Normally that sets a warning flag for me when somebody can see the file structure after the gain access. Chroot sounds promising tho. –  Cudos Nov 4 '09 at 10:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.