Re: ftp access

From: Brooks Davis (brooks@one-eyed-alien.net)
Date: 02/28/01 

Date: Tue, 27 Feb 2001 15:10:44 -0800
From: Brooks Davis <brooks@one-eyed-alien.net>
To: "Travis [Admin Team]" <traviso@RapidNet.com>

On Tue, Feb 27, 2001 at 04:01:31PM -0700, Travis [Admin Team] wrote:
> On Tue, 27 Feb 2001, Brooks Davis wrote:
>
> > If you do this be sure to keep users from being able to access the system
> > via ssh. Otherwise they can just use ssh to spawn a shell for themselves:
> >
> > ssh -t <host> /bin/sh
>
> Course I believe you disable it with a -T doncha? >;)

I'm afraid I don't see your point. It's true that -T is the opposit of
-t for the ssh client, but that doens't have anything to do with the
fact that any user with a valid username and password can get a shell
via ssh unless you don't allow them to run ANYTHING via sshd.

-- Brooks 

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: openSSH and PATH
    ... >> those things are generally set by your system's login program. ... >> general ssh daemons do not invoke the system login program. ... >> change that, in the sshd configuration. ... A lot of us prefer to use our .cshrc, .profile, or other shell ...
    (comp.security.ssh)
  • Re: SFTP is not working
    ... When I try to use sftp or scp2, I get a message like this: ... sftp and scp2 both actually work by running ssh in a subprocess, ... The reason the shell startup files are relevant at all, ...
    (comp.security.ssh)
  • Re: Did you hack into my UNIX server Bible Bob?
    ... But that's not a shell question. ... >> OSX users, should I be using ssh instead of telnet for security? ... OSX as a built in firewall tab. ...
    (comp.unix.shell)
  • Re: "Driving" Linux Command Line from C# ?
    ... the usual Google search. ... Putty is great for manual work, but no API ... would be an SSH utility with an API but if it exists I haven't been ... Just be sure that you are sure about the shell on the ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Execute and lock a user into a program upon login
    ... logs in to the box via SSH, a command is run, and they immediately get ... dropped into the environment that the command produces. ... user is dropped into the application 'vtysh' ... shell drops (ie. user does not have to exit the csh shell to drop the ...
    (freebsd-questions)