restrict a host's access to a single subdirectory within a filesystem, though other systems can access the entire filesystem

Printable View