A friend of mine has a xandros-based Acer netbook, and has been looking to get some remote administration and help from me while she is travelling around the world.
I've set up an account on her netbook for me to ssh into, and set up a script to reverse-ssh-tunnel from her netbook to my server - this lets me get around the problems with firewalls etc at various hostels and hotels. Once she has ssh'ed into my server, I can then ssh along to her netbook.
I've got a bash script that is run as her shell when she ssh'es into my server, which just gives her a 'please wait' sort of screen, and the only option is to exit from the script, and hence get booted from the server.
The user I've created for her on my server is low rights, but there's bound to be some exploit which would mean she would have ssh access to my server.
I'm considering also using a chroot jail, so if she escapes she'd only have access to her home directory.
Is this a good idea, and are there any other security tips that I may have missed for keeping my server secure, while still allowing me to access her netbook remotely?
To clarify, I don't think she'll try to escape from the jail, or the chroot, but I'd like to know how I could prevent this just in case.
And do you have any other suggestions for how I might access the netbook or other layers I could place in between the user and my hardware?