[COLUG] Restricted Shells

[Warner Moore]

> -----Original Message-----
> From: colug432-bounces at colug.net 
> [mailto:colug432-bounces at colug.net] On Behalf Of Richard Holbert
> Sent: Friday, April 18, 2008 3:15 PM
> To: Central OH Linux User Group
> Subject: [COLUG] Restricted Shells
> 
> Anyone else in COLUG land using restricted shells such as 
> rssh or scponly?
> 
> Our department's been using rssh for a while now, but it is 
> no longer in 
> active development and rsync 3.0 seems to break it.
> 
> So, has anyone else evaluated these products, or have a 
> better solution 
> for restricted shells that only allow scp, sftp and rsync access?

	scponly works pretty well.  

	Limiting shell function is pretty simple, even if not just hacking
out /bin/false.  I had a simple .c file I used to recycle.  

	You can always add the desired service as the shell, however this
can sometimes be broken out of.


Warner