Date: Mon, 14 Jun 2004 17:16:53 +0200 From: Remko Lodder <remko@elvandar.org> To: Bruce M Simpson <bms@spc.org> Cc: Dan Rue <drue@therub.org> Subject: Re: [Freebsd-security] Re: Multi-User Security Message-ID: <40CDC165.4030107@elvandar.org> In-Reply-To: <20040614113858.GA13028@empiric.dek.spc.org> References: <20040518160517.GA10067@therub.org> <OPEPILILPLAKPFCNKOKAGEGHCBAA.remko@elvandar.org> <20040520033024.GA26640@therub.org> <20040606233720.F1850@ync.qbhto.arg> <20040607204149.GC75747@blossom.cjclark.org> <20040609050217.Q5839@ync.qbhto.arg> <20040609145223.GA53862@blossom.cjclark.org> <20040614113858.GA13028@empiric.dek.spc.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Bruce M Simpson wrote: > On Wed, Jun 09, 2004 at 07:52:23AM -0700, Crist J. Clark wrote: > >>To do scp-only, you either need (a) a hacked up sshd(8) daemon, (b) a >>jailed environment, or (c) a special shell for the user that only allows >>scp(1) to run. The funny thing is, I think (c) is probably the easiest >>to implement on a mass scale, but seems to be the option most seldom >>considered. > > > ports/shells/scponly > > BMS Bruce, Indeed that is what i said as well :-) Cheers! -- Kind regards, Remko Lodder |remko@elvandar.org Reporter DSINet |remko@dsinet.org Projectleader Mostly-Harmless |remko@mostly-harmless.nl
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?40CDC165.4030107>