From owner-freebsd-questions Fri Dec 8 13: 2: 2 2000 From owner-freebsd-questions@FreeBSD.ORG Fri Dec 8 13:02:00 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from pyxis.orem1.northsky.com (orca.northsky.com [209.210.67.7]) by hub.freebsd.org (Postfix) with ESMTP id 799AB37B402; Fri, 8 Dec 2000 13:01:55 -0800 (PST) Received: from innocent.com (black-hole.orem1.northsky.com [10.11.1.86]) by pyxis.orem1.northsky.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id YKVHRGCR; Fri, 8 Dec 2000 14:01:55 -0700 Message-ID: <3A314BD3.F97751AD@innocent.com> Date: Fri, 08 Dec 2000 14:00:03 -0700 X-Sybari-Space: 00000000 00000000 00000000 From: Joseph R Lewis X-Mailer: Mozilla 4.76 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Bill Paul Cc: "Nicolai L. Brown" , freebsd-questions@FreeBSD.ORG Subject: Re: scp only References: <20001208202307.0CE0E37B401@hub.freebsd.org> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Bill Paul wrote: > > I would set the user's shell to /bin/false instead. I'm not sure > how sshd will react to this though. It returns a "permission denied". If it can't find the shell, it will fail. This will give no shell access. This is, perhaps, the best method of removing someones shell access. > -Bill Joe Lewis, Web Developer, About, Web Services Division To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message