I read documentation on the internet on how to create a new user with SSH access. I figured it out and to create a user is quite simple.
The next step I want to take is to jail this ssh server to the /home/ directory on my machine. It needs the permission to write/create folder/files in directories of other users (CMS system).
How can I implement this?
You can achieve it using the below command. Assuming the new user created is user1, you can give the below command to give access to this user access to the home directories of the other users.
setfacl -R -m user:user1:rwx /home/
However, it is strongly not recommended.
You can find this answer for my question here. We have implemented a similar setup in one of our labs but we do not have given the write permission to the users. If at any time you feel to revoke the file access to this user, you can use the below command.
setfacl -R -x user:user1: /home/
setfaclto the user./etcfor dns, username lookups, etc. Then/dev,/bin,/usr/bin,/lib64, etc. By the time you've added all the directories needed for normal operation, there's pretty much nothing left outside the jail. About the only thing I can think of is some stuff in/var. What is it you're hoping to prevent access to?