[Bug 456182] Review Request: rssh - Restricted shell for use with OpenSSH, allowing only scp and/or sftp

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=456182


Derek Martin <code at pizzashack.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |code at pizzashack.org




--- Comment #17 from Derek Martin <code at pizzashack.org>  2008-10-28 13:57:31 EDT ---
Actually, rssh should *absolutely* *not* be added to /etc/shells.  This file
lists shells which should be considered valid login shells.  rssh is not, nor
is it intended to be, a valid login shell... it's a specialized shell intended
to provide extremely restricted access.

One consequence of adding rssh to /etc/shells is that if the machine in
question has an FTP server configured, then depending on which server and how
it is configured, any user whose shell is rssh might be granted access to the
FTP service unintentionally.  This would defeat the purpose of configuring the
user's shell to be rssh! Other installed programs may also check /etc/shells
for a similar purpose.

Please remove that functionality from the post and postun portions of the spec
file.

[I am the original author of RSSH.]

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.