|
|
Secure Shell
How to restrict ssh user to the home directory ? Apr 21 2009 04:25PM J. Bakshi (bakshi12 gmail com) (7 replies) Re: How to restrict ssh user to the home directory ? Apr 23 2009 09:26PM Jose Celestino (japc co sapo pt) Re: How to restrict ssh user to the home directory ? Apr 23 2009 04:07PM Romain Pelisse (belaran gmail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 23 2009 05:20PM Jorge Fco. Rivera (jorge_grivera hotmail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 25 2009 02:34PM J. Bakshi (bakshi12 gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 07:18PM Robert Hajime Lanning (robert lanning gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 07:15PM Shawn Merdinger (shawnmer gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 05:21PM Benny Helms (benny egovmt com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 23 2009 02:57PM J. Bakshi (bakshi12 gmail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 22 2009 05:16PM Marcin Semik (mutifo gmail com) Re: How to restrict ssh user to the home directory ? Apr 22 2009 04:15PM Hari Sekhon (hpsekhon googlemail com) (1 replies) Re: How to restrict ssh user to the home directory ? Apr 22 2009 05:19PM J. Bakshi (bakshi12 gmail com) |
|
Privacy Statement |
> On Wed, 22 Apr 2009 11:21:06 -0600
> Benny Helms <benny (at) egovmt (dot) com [email concealed]> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> You always have the option of changing their login shell to
>> '/bin/bash -s' which locks them in. Unfortunately, it also takes
>> away their access to things like, 'ls' and 'cp' and 'vi', etc.,
>> unless you include copies in their home folder.
>>
>> You also need to remember that some apps like 'vim' will allow a user
>> a shell escape which can break the limits you set. Make sure to give
>> them access only to the secure version. For 'vim' that would be
>> 'rvim'.
>
> thanks a lot for the rvim tip.
> I am grateful to you to make me aware that vim allows shell access.
A lot of utilities allow shell access.
more
less
vi
nvi
vim
emacs
nano
pico
awk
...
If you have perl access, you have fork/exec access.
uploading your own binaries that fork/exec...
general shell access is not easy to do securely.
chroot is basically your only choice.
--
And, did Galoka think the Ulus were too ugly to save?
-Centauri
[ reply ]