Re: Server-wide no-pty

From: Rajkumar S (listuser_at_myrealbox.com)
Date: 05/21/03

  • Next message: TooManyMirrors: "Re: sftp script running through crontab"
    Date: Wed, 21 May 2003 21:49:29 +0530
    To: SSH Support <secureshell@securityfocus.com>
    
    

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Rajkumar S wrote:

    > similar) mode so that people can use the server for rsync and cvs but
    > not shell or login access.

    I got what I want in a truly bizzare way. Having failed deny shell I was
    looking for restricted bash as a compromise. To enable restricted bash
    bash has to be called as rbash. I edited the sources and changed that to
      bash itself and compiled it with

    $ ./configure --enable-minimal-config --enable-restricted
    - --disable-disabled-builtins --disable-xpg-echo-default --enable-static-link

    and put that as the shell for my (chrooted) ssh. and it worked!! login
    is not allowed, while rsync and cvs is possible. But I have no idea how
    it worked.

    > My another question is how to enable logging for a chrooted sshd?

    This question remains though !

    raj
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.7 (GNU/Linux)
    Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

    iD8DBQE+y6cWg/KquOAub0IRAhzHAKDaCKmFuku0LgDSaONDetYieF17/wCeK3mq
    6/ajdoZHrvYvZ7/hF5246RU=
    =WVMK
    -----END PGP SIGNATURE-----


  • Next message: TooManyMirrors: "Re: sftp script running through crontab"
  • Quantcast