Re: ssh and cvs login, but no user login

From: Armin Krawinkel (geschrei_at_gmx.at)
Date: 04/28/03


Date: Mon, 28 Apr 2003 00:05:46 GMT

Stephan Seitz announced in
<0t3eac19f3i6f02n7da%stse@fsing.fs.uni-sb.de>:

> Hi!
>
> I have the following problem:
> No user beside the admins should be able to log in into a certain
> server. But cvs is running on this server and the clients use
> CVS_RSH=/usr/bin/ssh to commit or checkout data.
> How can I configure ssh to allow the cvs connection, but don't give
> shell accounts to the user?
>
> I'm using openssh 3.4.
>
> Shade and sweet water!
>
> Stephan
>

you could run the cvs server in a chroot jail and use /bin/false as
login shell for the users in the "real" /etc/passwd

-- 
life, the universe and everything


Relevant Pages

  • CERT Advisory CA-2003-02 Double-Free Bug in CVS Server
    ... CVS is a version control and collaboration system that is widely used ... already freed memory leads to heap corruption, which an attacker could ... CVS server program, or read sensitive information stored in memory. ... Apply the appropriate patch or upgrade as specified by your vendor. ...
    (Cert)
  • [UNIX] CVS Remote Vulnerability
    ... Concurrent Versions System (CVS) is the dominant open-source version ... be used by a remote attacker to execute arbitrary code on the server. ... While auditing the CVS sourcetree Stefan Esser found a flaw within the ... uses this vulnerability to execute arbitrary shell commands on BSD ...
    (Securiteam)
  • Advisory 01/2003: CVS remote vulnerability
    ... Vendor Status: Vendor has released a bugfixed version. ... can be used by a remote attacker to execute arbitrary code on the server. ... that the CVS client/server protocol includes two ... vulnerability to execute arbitrary shell commands on BSD servers. ...
    (Bugtraq)
  • [VulnWatch] Advisory 01/2003: CVS remote vulnerability
    ... Vendor Status: Vendor has released a bugfixed version. ... can be used by a remote attacker to execute arbitrary code on the server. ... that the CVS client/server protocol includes two ... vulnerability to execute arbitrary shell commands on BSD servers. ...
    (VulnWatch)
  • Cross-Site Multi-Platform Development Concerns
    ... I have multiple computers on my home network which I'm ... I'm using CVS ... I'd really like to have one central development web server to handle my ... to manage the whole process with CVS and have one central testing server. ...
    (comp.lang.perl.misc)