2
votes
1answer
340 views

Why use lxc instead of chroot?

One ubuntu server hosts 3 apps all on separate domains. Each app has its own developers. App developers belong to linux "sftp" group. chroot allows password sftp access for each app developer. ...
-2
votes
2answers
153 views

Any difference between a SSH user, SFTP user, cPanel user, etc? [closed]

I've recently disabled root access on my server and enabled sudo for my user. However I also use this user account for SFTP and logging into cPanel. Is there any security issue with this? By default I ...
0
votes
2answers
147 views

Why should I keep the root user if I'm not supposed to use it?

I'm on a fresh VPS with Ubuntu Server 12.04. I wanted to ask you the good practices to apply to enhance security over a stock Ubuntu-server. This is what I did up to now: I added Google Authenticator ...
0
votes
2answers
2k views

Restricting User Access in Debian Squeeze

I've been contemplating ways to restrict user access to their own directories, not allowing them to navigate above their own user directory. I'm using SFTP, and don't want to install regular FTP ...
2
votes
2answers
339 views

Is it safe to only allow SSH access from certain IPs?

I'm currently installing CSF (http://www.configserver.com/) for my Ubuntu server and in CSf you're able to specify the ports you want everyone to be able to access, and if your IP is in the allowed ...
13
votes
6answers
4k views

What are some secure alternatives to FTP? [closed]

This Hacker News story is all about the downsides of FTP. The only reason I might set up FTP is that it's easy. I know about and use scp already, but sometimes I want to share files with someone ...
2
votes
1answer
745 views

How to change user for more rights on a SFTP client?

It is always suggested on first step to disable the remote root login for the SSH protocol. I have a low-right user able to connect via SSH and once connected, I simply su in order to gain more ...
0
votes
5answers
154 views

File transfer sftp secure?

Suppose I have a text file with confidential information. I want to transfer from American facility to the france facility via sftp set up in a website. Is the file transfer secure?
1
vote
1answer
127 views

How can I set a global sftp chroot for a group (or all) users on a server [duplicate]

Possible Duplicate: set up a chrooted SFTP login with OpenSSH I am not familiar with chroot jails so please forgive my ignorance. From my understanding you would normally chroot a user to ...
4
votes
1answer
1k views

How to restrict SSH /SFTP User to a sub folder of an apache website?

I'm currently setting up apache on a Linux server and need to create a new user which can log in and only edit files in a particular directory. I currently have my website set-up as ...
0
votes
1answer
331 views

Can't connect using Jail SFTP account

I've been following this tutorial "Limiting Access with SFTP Jails on Debian and Ubuntu" and whilst I've had no errors setting it up, I've had issues on Ubuntu 10.04LTS logging in as a user on a ...
0
votes
6answers
441 views

Secure data transfer from a RHEL 5 box

I have been researching this for a while but cant find and conclusive answeres. FTP - Very insecure. FTP over SSl - Not fully supported everywhere, only a few clients support it? SFTP - This is the ...
0
votes
1answer
106 views

help me setup a good security policy

i'm running a site on a shared host while image hosting is done on amazon s3. i've opened a second shared host account for backups. here's my setup : A -> site on shared host, pushes images to B (s3 ...
2
votes
5answers
891 views

SFTP: How to keep data out of the DMZ

We are investigating solutions to the following problem: We have external (Internet) users who need access to sensitive information. We could offer it to them via SFTP which would offer a secure ...
1
vote
6answers
107 views

Is a file any 'safer' when FTPed inside a plain old zip file then if it was FTPed as a txt file

For example, a csv of demographic data. Over Plain FTP (not SFTP or FTPS or WebDav).
0
votes
1answer
168 views

Lock down SFTP access on OpenSolaris

I have an OpenSolaris 2009.06 server and I'd like to enable a user to remotely change files in a specific directory, ideally via SFTP or FTP-via-SSH. This user does not yet have an account on the ...
0
votes
1answer
893 views

copSHH how to restrict user from going back from there main root

I have installed SFTP on a windows servers using copSSH and all is good and it works well however you can go back from the main root. For example when i use C:\copSSH\home{username} as that user i ...
2
votes
2answers
648 views

Is there a debian lenny patch to allow apt-get to work with sftp?

I would like to write things like this in /etc/apt/sources.list: deb sftp://someuser@some.server.org/path other stuff When I try this, apt-get complains that there is no sftp method for apt: # ...
3
votes
5answers
1k views

SFTP File Restrictions

Is it possible to use SFTP on Linux and restrict a user account to ONE directory such that no other directory listing can be obtained? Yes, I must use SFTP, FTP is only used by people that love ...
2
votes
2answers
396 views

Using UUIDs for passwords

Does anyone have an opinion on using UUIDs as passwords? This is intended for accounts created for external users, such as customer access to private SFTP folders. Or are people using public key ...
2
votes
1answer
533 views

Cygwin SFTP directory security

Here is what we are trying to accomplish: A client drops off a file on a Windows/Cygwin SFTP folder A Windows service scans the folder and processes the file The problem: The Windows service is ...
0
votes
5answers
873 views

Recommend an SFTP solution for Windows (Server & Client) that integrates well with Dreamweaver [duplicate]

Possible Duplicate: SSH / SCP Server on Windows Could you please recommend a secure FTP solution for updating files on a remote windows server from windows workstations? We would like to ...
2
votes
4answers
205 views

Looking for FTP server recommendations for BSD [closed]

I'm currently deciding on what ftp server we should use for an internal system that we have running FreeBSD 6.2. The requirements that we'll need are the following: must be able to handle SSL, as ...
2
votes
12answers
369 views

Secure File Transfer Site

I need to setup a site to share files with clients. Everything about it has to be secure so, I don't want to use straight FTP. The other requirement is that it has to be easy to use as the people that ...
9
votes
4answers
3k views

Securing file system for secure SFTP server

This might not seem as a development question, but in essence it is. Let me explain how. Our main development focus is dynamic content pages. Some of our customers have asked us to allow them space ...