Re: HowTo Disable execution of commands whit ssh and scp/sftp

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 11 Mar 2004 20:54:50 +0000 John Haxby <jch@xxxxxxxxxxxxxxx> wrote:

> Dario Lesca wrote:

> >Hi, someone know howto disable the execution of any command via ssh and
> >disable the scp/sftp service?

> >OK; ssh user@host 
> >NO: ssh user@host cat /etc/passwd
> >NO: scp user@host:/etc/passwd /tmp
> >NO: sftp user@host

> Apart from sftp (which as someone else said), the short answer is "no".
...
> However, as someone else suggested.   There is another way.   A chrooted 
> environment (like the one used for anonymous ftp) will lock a user into 
> a limited environment.

a lot depends on what the goal is. if you are trying to provide a
restricted file transfer environment, you should look at running
rssh inside a chroot environment:

http://www.pizzashack.org/rssh/index.shtml

i have it running at a client's site, and it's working out quite
nicely.

richard
-- 
Richard Welty                                         rwelty@xxxxxxxxxxxxxxx
Averill Park Networking                                         518-573-7592
    Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security




[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux