atom feed18 messages in org.freebsd.freebsd-security[Freebsd-security] Re: Multi-User Sec...
FromSent OnAttachments
David E. MeierMay 17, 2004 5:08 am 
Frankye - MLMay 17, 2004 6:11 am 
Jan GrantMay 17, 2004 6:26 am 
Richard ColemanMay 17, 2004 6:56 am 
Norberto MeijomeMay 17, 2004 9:41 pm 
Gregory SutterMay 18, 2004 1:35 am 
Dan RueMay 18, 2004 9:05 am 
Remko LodderMay 18, 2004 9:10 am 
David E. MeierMay 18, 2004 9:32 am 
Dan RueMay 19, 2004 8:30 pm 
Remko LodderMay 20, 2004 1:56 pm 
Doug BartonJun 7, 2004 6:38 am 
Crist J. ClarkJun 7, 2004 8:41 pm 
Doug BartonJun 9, 2004 12:03 pm 
Crist J. ClarkJun 14, 2004 10:42 am 
Bruce M SimpsonJun 14, 2004 11:56 am 
Lupe ChristophJun 14, 2004 3:48 pm 
Remko LodderJun 14, 2004 4:05 pm 
Subject:[Freebsd-security] Re: Multi-User Security
From:Doug Barton (Dou@FreeBSD.org)
Date:Jun 7, 2004 6:38:53 am
List:org.freebsd.freebsd-security

On Wed, 19 May 2004, Dan Rue wrote:

You obviously havn't tried to chroot scponly users.. _that's_ the tricky part. Especially if you want it to scale up beyond a handful of users. If i'm wrong - fill me in i'd love to hear how to do it.

Have you considered using ~/.ssh/authorized_keys to restrict the account from tty access? This would allow you to do commands (like scp) without the risk of the user getting an actual shell.

Doug

--

This .signature sanitized for your protection