Re: ssh passwd -f in a restricted shell

From: Neil W Rickert (rickert+nn@cs.niu.edu)
Date: 02/26/02 

From: Neil W Rickert <rickert+nn@cs.niu.edu>
Date: 26 Feb 2002 22:10:49 GMT

jason@jasonprice.net (Jason Price) writes:

>We are restricting users on a certain machine as to what they can run.
> Currently, only ls,passwd,rm,scp, and ssh are allowed. The problem is
>when passwords expire the users don't seem to have permission the
>change their password. At first, I thought it was because sshd was
>calling /bin/passwd, but I changed which passwd binary to use and it
>still errors.

>Any help ?

>Below is after a passwd -f. This is on a Solaris 8 machine with SSH
>Comm's version of ssh. SSH-2.0-3.0.1 SSH Secure Shell (non-commercial)
>user@sys 502 ~ >ssh -l user system
>user's password:
>Authentication successful.
>/usr/lib/rsh: /usr/local/rsh/passwd: restricted
>Connection to system closed.
>user@sys 502 ~ >

The restricted shell does not permit a command path to be executed.
The command must be in the default path and executed without
specifying a command.

Relevant Pages

  • Re: ssh passwd -f in a restricted shell
    ... >>We are restricting users on a certain machine as to what they can run. ... >> Currently, only ls,passwd,rm,scp, and ssh are allowed. ... > The restricted shell does not permit a command path to be executed. ...
    (comp.security.ssh)
  • Re: Changing Command Path In Command Prompt
    ... > How do I change the default command path when I start up a Command ... Right click the shortcut that you use to go to the command prompt and select ...
    (microsoft.public.windowsxp.help_and_support)
  • limiting the ps command
    ... i am trying to find out a way to limit regular users in the way they use ... the 'ps' command ... 'ps -u $LOGNAME' and nothing else ... restricting users so they only see what processes they are running is ...
    (alt.computer.security)