Re: sftp access

From: Darren Tucker (dtucker_at_zip.com.au)
Date: 09/28/04

  • Next message: Jerry: "Solaris 8, PAM, LDAP" 
    Date: Wed, 29 Sep 2004 07:20:26 +1000
To: Penza Kenneth at MITTS <kenneth.penza@gov.mt>

    Penza Kenneth at MITTS wrote:
    > I am running openssh 3.6.1p2 on linux servers, is there a way that disable
    > sftp/scp access to some users without affecting ssh access. Something in the
    > same lines as /etc/ftpusers or /etc/ftpaccess.

    You can set the gid on the scp and sftp-server binaries to a "scpallow"
    group and chmod them 550 but that won't stop users transferring files.
      They can install their own copy of scp, and they can also do:

    ssh yourserver "cat >remotefile" <localfile

    and similar. 

    -- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
  • Next message: Jerry: "Solaris 8, PAM, LDAP"