jorgemarmo
Occasional Visitor
Hi,
I would like to be able to access some files from outside my network via SFTP and mainly from windows clients using WinSCP.
I'm running a raspberry pi 4 under raspbian 10 Lite, as a media server with samba in the local network.
Now I would like to:
1) create a user, lets say "dummy1" but with not "sudo" capabilities (I'm almost sure this will happen for every single user I add by default)
2) give only read permissions to "/media/USBHDD1/thisfolder" (which is the mounting path of an external hdd in NTFS if that matters).
3) give read and write permission to "/media/USBHDD1/dummy1folder" (and if possible establish a cuota?)
4) secure everything else... no execution, no GUI, no other write/read/execute privileges except whatever is needed to download and upload files to/from those folders.
so what would be the easiest way to do this?
so far I've found this:
https://www.digitalocean.com/community/ ... -directory
and this
https://www.digitalocean.com/community/ ... ted-access
but is not working for them, it's for ubuntu, and some guy even got locked out of its server.... So I ask you to try to avoid these issues.
I would like to be able to access some files from outside my network via SFTP and mainly from windows clients using WinSCP.
I'm running a raspberry pi 4 under raspbian 10 Lite, as a media server with samba in the local network.
Now I would like to:
1) create a user, lets say "dummy1" but with not "sudo" capabilities (I'm almost sure this will happen for every single user I add by default)
2) give only read permissions to "/media/USBHDD1/thisfolder" (which is the mounting path of an external hdd in NTFS if that matters).
3) give read and write permission to "/media/USBHDD1/dummy1folder" (and if possible establish a cuota?)
4) secure everything else... no execution, no GUI, no other write/read/execute privileges except whatever is needed to download and upload files to/from those folders.
so what would be the easiest way to do this?
so far I've found this:
https://www.digitalocean.com/community/ ... -directory
and this
https://www.digitalocean.com/community/ ... ted-access
but is not working for them, it's for ubuntu, and some guy even got locked out of its server.... So I ask you to try to avoid these issues.