atom feed18 messages in org.freebsd.freebsd-security[Freebsd-security] Re: Multi-User Sec...
FromSent OnAttachments
David E. MeierMay 17, 2004 5:08 am 
Frankye - MLMay 17, 2004 6:11 am 
Jan GrantMay 17, 2004 6:26 am 
Richard ColemanMay 17, 2004 6:56 am 
Norberto MeijomeMay 17, 2004 9:41 pm 
Gregory SutterMay 18, 2004 1:35 am 
Dan RueMay 18, 2004 9:05 am 
Remko LodderMay 18, 2004 9:10 am 
David E. MeierMay 18, 2004 9:32 am 
Dan RueMay 19, 2004 8:30 pm 
Remko LodderMay 20, 2004 1:56 pm 
Doug BartonJun 7, 2004 6:38 am 
Crist J. ClarkJun 7, 2004 8:41 pm 
Doug BartonJun 9, 2004 12:03 pm 
Crist J. ClarkJun 14, 2004 10:42 am 
Bruce M SimpsonJun 14, 2004 11:56 am 
Lupe ChristophJun 14, 2004 3:48 pm 
Remko LodderJun 14, 2004 4:05 pm 
Subject:[Freebsd-security] Re: Multi-User Security
From:Crist J. Clark (cris@comcast.net)
Date:Jun 7, 2004 8:41:41 pm
List:org.freebsd.freebsd-security

On Sun, Jun 06, 2004 at 11:38:55PM -0700, Doug Barton wrote:

On Wed, 19 May 2004, Dan Rue wrote:

You obviously havn't tried to chroot scponly users.. _that's_ the tricky part. Especially if you want it to scale up beyond a handful of users. If i'm wrong - fill me in i'd love to hear how to do it.

Have you considered using ~/.ssh/authorized_keys to restrict the account from tty access? This would allow you to do commands (like scp) without the risk of the user getting an actual shell.

$ ssh host /bin/sh

You don't need a tty to get an interactive shell.

-- Crist J. Clark | cjcl@alum.mit.edu | cjcl@jhu.edu http://people.freebsd.org/~cjc/ | cj@freebsd.org