Limiting system and filesystem access

McDougall, Marshall (FSH) MarMcDouga at gov.mb.ca
Fri Dec 9 17:13:13 UTC 2005


"ftp/tls would be my preferred solution.  However if you are forced to
stick with ssh/scp you can take a look at
http://www.sublimation.org/scponly/.
It basically is a shell that only permits scp/sftp interaction and can
chroot the user to where you want him to be."


Thanks Tobias.  The secureshell at securityfocus.com list came back with
resounding support for scponly.  I am in the process of testing it now.

Regards, Marshall




More information about the redhat-list mailing list