# Granting SSH access to a Ruby on Rails user **URL:** \ **Category:** Rails\ **Created:** [January 12, 2006, 8:25pm UTC](https://www.ruby-forum.com/t/granting-ssh-access-to-a-ruby-on-rails-user/95093 "2006-01-12T20:25:16Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![casper\_the\_ghost](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/58956e/32.png) [@casper\_the\_ghost](https://www.ruby-forum.com/u/casper_the_ghost)\ **Post date:** [January 12, 2006, 8:25pm UTC](https://www.ruby-forum.com/t/granting-ssh-access-to-a-ruby-on-rails-user/95093/1 "2006-01-12T20:25:16Z")
I installed Rails and Rubygems on a web server for a customer who wants to install a Ruby on Rails application that he developped. He needs SSH access to interact with Ruby, so I’ll have to grant him access, but I want him to only play around in his /home directory, as this server also hosts other customers. How could I do that? Thanks, ---
**Author:** ![casper\_the\_ghost](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/58956e/32.png) [@casper\_the\_ghost](https://www.ruby-forum.com/u/casper_the_ghost)\ **Post date:** [January 12, 2006, 9:57pm UTC](https://www.ruby-forum.com/t/granting-ssh-access-to-a-ruby-on-rails-user/95093/2 "2006-01-12T21:57:58Z")
Basic users in \*nix systems are restrictied to only changing things in their home directory. Be sure not to put the user in any groups that are more powerful (e.g. wheel) ~ Ben ---
**Author:** ![casper\_the\_ghost](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/58956e/32.png) [@casper\_the\_ghost](https://www.ruby-forum.com/u/casper_the_ghost)\ **Post date:** [January 12, 2006, 10:04pm UTC](https://www.ruby-forum.com/t/granting-ssh-access-to-a-ruby-on-rails-user/95093/3 "2006-01-12T22:04:03Z")
On 12 Jan 2006, at 19:25, Charles wrote: > I installed Rails and Rubygems on a web server for a customer who > wants > to install a Ruby on Rails application that he developped. > > He needs SSH access to interact with Ruby, so I’ll have to grant him > access, but I want him to only play around in his /home directory, as > this server also hosts other customers. How could I do that? Setup a Jailshell: > **[The Gentoo Linux](https://www.customessaymeister.com/essay/the-gentoo-linux)** > > ⭐ Gentoo Linux is a distribution or operating system that provides users with extensive customizability. Its creator, Daniel Robbins, developed the system to minimize CPU usage and improve system performance. More secure, use Jailkit: > **[Jailkit - chroot jail utilities](https://olivier.sessink.nl/jailkit/)** > > Jailkit - a set of utilities to create chroot shells or chroot daemons Or sell him a VM to play with 😃 ## Yours, Craig Craig W. | t: +44 (0)131 516 8595 | e: removed\_email\_address@domain.invalid [Xeriom.NET](http://Xeriom.NET) | f: +44 (0)131 661 0689 | w: [http://xeriom.net](http://xeriom.net) ---
**Author:** ![casper\_the\_ghost](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/58956e/32.png) [@casper\_the\_ghost](https://www.ruby-forum.com/u/casper_the_ghost)\ **Post date:** [January 13, 2006, 6:52am UTC](https://www.ruby-forum.com/t/granting-ssh-access-to-a-ruby-on-rails-user/95093/4 "2006-01-13T06:52:47Z")
On Thu, 2006-01-12 at 20:25 +0100, Charles wrote: > I installed Rails and Rubygems on a web server for a customer who wants > to install a Ruby on Rails application that he developped. > > He needs SSH access to interact with Ruby, so I’ll have to grant him > access, but I want him to only play around in his /home directory, as > this server also hosts other customers. How could I do that? This is more of a question for a Unix user group not a Rails list. 🙂 If you provide them SSH and have Ruby and RubyGems (with Rails installed)… they should be able to play with it. Robby – /\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* - Robby R., Founder & Executive Director \* - PLANET ARGON, LLC | [www.planetargon.com](http://www.planetargon.com) \* - Ruby on Rails Development, Consulting, and Hosting \* - Portland, Oregon | p: 503.351.4730 | f: 815.642.4068 \* - blog: [www.robbyonrails.com](http://www.robbyonrails.com) | book: [www.programmingrails.com](http://www.programmingrails.com) \* \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*/ ---
**Author:** ![casper\_the\_ghost](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/58956e/32.png) [@casper\_the\_ghost](https://www.ruby-forum.com/u/casper_the_ghost)\ **Post date:** [January 13, 2006, 9:56am UTC](https://www.ruby-forum.com/t/granting-ssh-access-to-a-ruby-on-rails-user/95093/5 "2006-01-13T09:56:28Z")
Hi all, On Friday 13 January 2006 06:50, Robby R. tried to type something like: > If you provide them SSH and have Ruby and RubyGems (with Rails > installed)… they should be able to play with it. > Or you can build a rail app to have them do so … 🙂 This was also meant seriously. I run a (small) hosting company, and have people use rssh ([rssh - restricted shell for scp/sftp](http://www.pizzashack.org/rssh/index.shtml)). This is a child forked by ssh and therewith people can run sftp. A friend of mine runs dreamwaver (a win/flash dev app), and uploads with sftp very nicely. So with a web app you can have people install gems, or you can provide them with a default set, and make them available yourself when requested. Depending on the people who login on, the following is good to keep in mind. When people have access to a shell prompt over ssh, they’re past the outside perimiter (your firewall), and you have to keep a closer look at software exploits, rootkits and other flaws within your system. A jailed ssh environment, can be done but has some angles, you should look at. regards, Gerard. > Robby – “Who cares if it doesn’t do anything? It was made with our new Triple-Iso-Bifurcated-Krypton-Gate-MOS process …” My $Grtz =~ Gerard; ~ :wq!