search for: mypam

I did this as a project back in the early 2002, and I had a nice little how-to to walk me through it. Many work places and moves, and I've lost it. I have a friend who asked me about this recently, and I can't seem to find anything on the web, or the how-to I used (not surprised). If I remember correctly, you needed an up-to-date zlib, egd (or prng), OpenSSL, tcpwrappers, and OpenSSH.

...thout disabling writing to home directory! I've implemented it as PoC pam_module (not very secure at this moment), but i hope it can make it's way directly into OpenSSH. I'll tell you more, but here is the source if you wish anyway: https://github.com/Harvie/pam-ftpfuck/blob/master/src/mypam.c So how it works? It bind-mounts home directory of user into subdirectory of root-owned directory created especially for this user... so we're no longer chrooting into /home/user/ (which can be now owned by root) we'll rather chroot into /var/ssh-chroot/user/ (which is created on demand...