I know that I can use rsync over ssh to send files from one Linux computer to another. However, in this case I need to give access to my system to users with a lower level of trust (people who may decide to start snooping in my files in addition to uploading their own). I can make a "submissions" user on my system and give submitters the password so they can use rsync over ssh, but then any world-readable file on my system is fair game. I need something like ftp with a chroot jail to keep eyes off my data, but ftp itself is insecure. Am I barking up the wrong tree with rsync over ssh when I should really be investigating network shares or something like that?


  • Users can upload any file of any size and resume the transfer if it is interrupted.
  • Users can't see my (or, for bonus points, other unprivileged users') files on the system.
  • Does the upload-user need to see the files he uploaded himself? – mat Apr 29 '13 at 8:17
  • user1039462: No, the users don't technically need to see their own files, but I'm not sure how that would work while preserving the ability to resume broken transfers. – njahnke Apr 29 '13 at 23:39
  • 1
    You are right. I wanted to suggest, that you just remove the read privileges for the uploading group, but that doesn't work if you want to resume rsync transfers – mat Apr 30 '13 at 9:22

You would have a much easier time setting up a SAMBA share. (http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/install.html)

The security protocols it supports are far more fine tuned and allows for setting up users and the lot. You can also set up groups to place users in if they are already preexisting. I would suggest it as a much better way forward than creating/restricting user accounts.

This would allow you to also entirely restrict them to their folder with no way out and it supports ftp (much more friendly).

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.