[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Fw: [suse-security] sftp with no ssh login



Quoting Manuel Balderrábano <garibolo@xxxxxxxxxx>:
>
> Hi to all again, thanks for all the ideas!
>
> What I did at the end is a mix of some things you guys said:
>
> 1.- created a .bashrc fila with a logout on the first line for all users
> (Just one)
> 2.- Change shell to bash for all this users.
> 3.- chown root .bashrc
> 4.- chmod 555 .bashrc
>
> And there you go!
>
> Do you find a hole on that?
>

Why don't you just use 'scponly' or 'rssh'?  The posted workarounds are kinda
silly when there are two perfectly good programs written precisely for what
you're looking for...

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here