Re: Restrict SSH users to home directory

From: Kyler Laird (Kyler@news.Lairds.org)
Date: 12/27/02


From: Kyler Laird <Kyler@news.Lairds.org>
Date: Fri, 27 Dec 2002 22:25:30 GMT

slade@shore.net (Richard E. Silverman) writes:

>What Nico wrote does not suggest either of these things. He warns that if
>you implement such a restricted shell as a shell script, it may not be
>secure.

The choice of language has little to do with being able to
do something stupid. I can easily write a C program with
an unprotected system() call.

>That warning does not say anything about the possibility of doing
>it securely by other means, nor does it say anything about his having
>tried it.

O.k., so it was without any point but to detract from the
suggestion of using a limited command to accomplish the
requested functionality?

--kyler


Loading