Re: ftp access

From: Brooks Davis (brooks@one-eyed-alien.net)
Date: 02/27/01 

Date: Tue, 27 Feb 2001 14:55:12 -0800
From: Brooks Davis <brooks@one-eyed-alien.net>
To: Rob Simmons <rsimmons@wlcg.com>

On Tue, Feb 27, 2001 at 05:38:58PM -0500, Rob Simmons wrote:
> /sbin/nologin as the user's shell. You also have to add this shell to
> /etc/shells

If you do this be sure to keep users from being able to access the system
via ssh. Otherwise they can just use ssh to spawn a shell for themselves:

ssh -t <host> /bin/sh

-- Brooks 

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: SFTP is not working
    ... When I try to use sftp or scp2, I get a message like this: ... sftp and scp2 both actually work by running ssh in a subprocess, ... The reason the shell startup files are relevant at all, ...
    (comp.security.ssh)
  • Re: Did you hack into my UNIX server Bible Bob?
    ... But that's not a shell question. ... >> OSX users, should I be using ssh instead of telnet for security? ... OSX as a built in firewall tab. ...
    (comp.unix.shell)
  • Re: "Driving" Linux Command Line from C# ?
    ... the usual Google search. ... Putty is great for manual work, but no API ... would be an SSH utility with an API but if it exists I haven't been ... Just be sure that you are sure about the shell on the ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Execute and lock a user into a program upon login
    ... logs in to the box via SSH, a command is run, and they immediately get ... dropped into the environment that the command produces. ... user is dropped into the application 'vtysh' ... shell drops (ie. user does not have to exit the csh shell to drop the ...
    (freebsd-questions)
  • Re: using ssh to run remote commands? [ssh -T, scp/ssh flags]
    ... I use SSH to forward connections between an intranet server at home and my ... To do this, the user on the remote machine need not have a shell, either ... start a shell on the remote host, ... you can have ssh run a command instead of an interactive shell by ...
    (FreeBSD-Security)