Re: log scp interactions with openssh

From: Alexander Klimov (alserkli_at_inbox.ru)
Date: 09/12/05

  • Next message: diabolo_at_cotse.net: "Re[2]: log scp interactions with openssh"
    Date: Mon, 12 Sep 2005 18:02:57 +0300 (IDT)
    To: diabolo@cotse.net
    
    

    Hi.

    On Sat, 10 Sep 2005 diabolo@cotse.net wrote:
    > I'm looking for a solution to log scp interactions on my server. I use
    > currently openssh version 4.1p1 with the sftplogging patch. For
    > users who need no shell access I use rssh to disable scp and force
    > the use of sftp. But for users which needs shell access I do not
    > know how to disable scp or to establish an scp logging.
    >
    > Is there a openssh patch for scp logging available?
    >
    > How can I disable scp for shell users?

    Probably, you can somehow disable scp, but what you will get? A user
    with shell access can just execute

      $ wget http://his-site/new-file

    or something similar to

      $ cat > new-file
      some data
      EOF

    and there are quite a few of packages which allows to automates this
    for large and binary files.

    -- 
    Regards,
    ASK
    

  • Next message: diabolo_at_cotse.net: "Re[2]: log scp interactions with openssh"

    Relevant Pages

    • Re: Howto deny a sftp connection
      ... > but that they cannot transfer files from that server. ... If you're allowing shell access then it's basically impossible to stop ... > Thats why I want to stop and deny all sftp and scp connections. ... the sftp subsystem is easily to stop by editing the sshd_config. ...
      (comp.security.ssh)
    • Re[2]: log scp interactions with openssh
      ... >> I'm looking for a solution to log scp interactions on my server. ... >> currently openssh version 4.1p1 with the sftplogging patch. ... But for users which needs shell access I do not ... The sftplogging patch for openssh is a good idea but can be bypassed by the user ...
      (SSH)
    • log scp interactions with openssh
      ... I'm looking for a solution to log scp interactions on my server. ... currently openssh version 4.1p1 with the sftplogging patch. ... know how to disable scp or to establish an scp logging. ...
      (SSH)
    • Re: How to enable file transfer for cross-platform application
      ... Doesn't scp *require* shell access on the destination? ... There is a restricted program called “scponly” that you can use as a shell ...
      (comp.os.linux.misc)
    • Re: Alternate login system
      ... like to offer users the ability to upload files via SCP, ... want people to have full shell access, nor access to the files of other ...
      (comp.os.linux.security)