Re: Restricitng SSH for CVS user

From: Andreas Mueller (nospam_at_home.de)
Date: 07/24/03 

Date: Thu, 24 Jul 2003 21:07:51 +0200

Denice DEATRICH wrote:

> Peter Ashford <me@here.there.com> writes:
>
>>I have a RH 8 CVS server which allows our office to use CVS over SSH.
>>The problem is that we have a seperate repository that we want to allow
>>an external user to use (we've generated an account and SSH rsa key for
>>him) but we don't want him to be able to access the server using a
>>shell. How do we allow the remote SSH/CVS access but disallow any shell
>>access?
>
> Lock the account.
>
> It's also best to only make the account on the cvs server (ie. the account
> is not part of a global NIS setup, for example).
>
> If you want to be paranoid, you could also think about chown-ing the home
> directory of the account, so that no files could ever be created in it
> (being careful of course to not nuke permissions on the .ssh tree).
>
> --
> denice.deatrich @ epfl.ch, DSC / LTHC-LTHI, E.P.F.L. PH: +41 (21) 693 76
> 67 <*> This moment's fortune cookie:
> Since aerosols are forbidden, the police are using roll-on Mace!

Hi, how could one lock the cvs-account ? 

-- 
Regards
Andy

Relevant Pages

  • Re: Restricitng SSH for CVS user
    ... >>Lock the account. ... >>It's also best to only make the account on the cvs server (ie. the account ... >>(being careful of course to not nuke permissions on the .ssh tree). ...
    (comp.os.linux.security)
  • Re: Disabling Switch User
    ... I sometimes like to lock ... I don't really want to keep enabling and disabling ... Connecting over ssh would not be an issue. ... disable an account I would be interested. ...
    (alt.os.linux.suse)
  • Re: Passing password in ssh
    ... If I create keys without a passphrase, and share the public keys between ... You do know that you first have to get the private key of the key ... The .ssh directory also ... But simply cracking into a user's account who has access to several ...
    (Fedora)
  • Re: Problems with Sudo
    ... where only one unprivileged account is allowed to log in. ... you're gaining nothing at all by running two ssh daemons ... Using odd port numbers isn't very useful either, ... I have SSH exposed to the world with key-only login and an iptables ...
    (Ubuntu)
  • Re: ssh and subsequent telnet, encrypted?
    ... >> account of mine only to launch telnet to a newsserver from ... is that telnet session (since it is embedded in the ssh ... the traffic between my shell account and the newsserver is ...
    (comp.security.ssh)
Loading