Re: ssh restrictions (/etc/ssh_config)



On Tue, 2007-09-18 at 12:19 +0100, Martin Simovic wrote:
Hi,

is there a way to restrict commands passed to ssh (client) to override
command line options

i need to restrict PermitLocalCommand to 'no', even if specified 'yes'
on command line

man ssh_config says

ssh obtains configuration data from the following sources in the follow‐
ing order:
1. command-line options
2. user’s configuration file (~/.ssh/config)
3. system-wide configuration file (/etc/ssh/ssh_config)

so it looks like that /etc/ssh/ssh_config is overridden by command line
argument ssh -o PermitLocalCommand=yes someuser@somehost

thank You,

martin.
Hi,
this is a question which I asked some yaers ago, and every now and
again ... but without any answer ...
So I made a patch by myself, which I also update with every new release
For the Patch to openssh-4.7p1 see attachment
The name of the not overidable configfile is ssh_config_p

--
H
CUH Rainer Peter Feller
H

Attachment: openssh-4.7p1-paranoia.patch.bz2
Description: application/bzip



Relevant Pages

  • RE: Redirect stdout from SSH
    ... command from the commandline the shell TTY will of cause be used and ... I did some tests on different machines ... therefore I also assume that it must be a configuration issue. ... connect from the same machines to the HPUX box using the same SSH client ...
    (SSH)
  • Re: Really need help on this one
    ... Is there a way to read the output of a particular command into ... Heres a better example using ssh. ... set timeout $timeout ... exec kill -9 $pid ...
    (comp.lang.tcl)
  • Re: OT: Hard disk mirror with Paragon on USB stick?
    ... at least two pages of intricate command line stuff. ... The password is only used when you want to backup to a remote machine ... via the network, using the ssh protocol. ... (e.g. with linux, ...
    (sci.electronics.design)
  • RE: midnight commander and ssh sftp
    ... midnight commander and ssh sftp ... which is displayed at the bottom of the MC panel. ... "Left file command options right" at the top of the MC ... MC SSH session with the remote host by hitting F10 key. ...
    (freebsd-questions)
  • Re: sshd and ftpd
    ... ssh keys, so when you log in it doesn't ask for one. ... we want to be able to connect to our remote host without ... If you used the defaults supplied by the ssh-keygen command, ...
    (Ubuntu)