Re: Restricted SSH access

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> tried with assigning a user /bin/bash console with -r (restricted) 
> parameter (set it up on /etc/passwd)
> but then I couldn't log on with putty or WinSCP to system.
> Any ideas for simple solution for my problem?
> 
> P.S. Somebody might ask why would somebody use ssh for that limited 
> access. Answer is that it must be supported, project specifications...

Firstly the shell in /etc doesn't include an argument setting so you want
to run /bin/rbash (and link bash to rbash)

Secondly you'll need to carefully set up your apps to have no holes

Thirdly make sure that they cant redirect into their own home directory
files (make the dir r/o and the files r/o)

Finally if you want them to use things like ftp you'll need to
put /bin/rbash into /etc/shells. You may well not want to do that bit of
course.

Alan

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux