So we’ve been buying some websites recently and I’ve needed to let people into the web server to upload content and such. I knew I needed to put these folks someplace where they couldn’t hurt anything else, or more importantly, see anything else on the server. So, I went digging around for an FAQ on how to most effectively get this done and I came across this script:
It’s quite nice.
Basically, you just pull that script down and get it on your machine. Then you feed it a username and let it go to work.
When it’s done, you’ll have a new user who is isolated to /home/jail. Their home dir will be in /home/jail/home and they can shell in and do whatever.