Limit every user to his own home folder only
I have a web server running 10.04 LTS and as a newbie in the world of server administration, I'm in a bind.
I would kindly ask that you do not divert the question. I am conscious I have some things wrong such as having root enabled, but that is not why I'm posting here. Thanks =D
Right now, I have three users. Root, which obviously has access to everything, and two other users that each own a website.
For these two users, their website is located in their respective home folder in an extra folder they each have Read, Write & Execute permissions on. This is the only folder they can write to. They cannot delete it, or change anything outside the folder.
So far so good, except that by default, they can also read any file in the system, meaning they can navigate to my other websites' folders and read, for instance, the database passwords from WordPress config files.
This is obviously problematic.
The users access their files and folders through SSH with FileZilla.
- How can I prevent these users from reading sensitive data, i.e. how can I restrict their access to only their home folder?
The users must continue to login through SSH with FileZilla (i.e. no FTP solutions)
Apache must still be able to access the user's folders (i.e. cannot chmod to 750)
- Folder containing the command line tools (/bin/bash I think) will probably have to be symlinked in the user's home folder? Please explain how to do this.
If you have an answer, I'd appreciate if you could write it in a way that assumes I know nothing about the command line. I'm like these users who don't know how to copy paste a file in Windows, except with the command line on Linux T_T