Re: Disallow command parameters from ssh connection

From: all mail refused (elvis_at_notatla.org.uk)
Date: 07/08/04 

Date: 8 Jul 2004 19:57:07 GMT

In article <d8c847cd.0407080635.23bc1ed0@posting.google.com>, Eric wrote:

>I wonder is there an option can be set or some sort of wrapper (open
>source or commecial) which will disallow command paramter from a ssh
>client connection?
>
>For example, a connection such as "ssh user@paranoia-serevr uname -n"
>will be rejected and only allow "ssh user@paranoia-server" type
>connection.
>
>Any pointer appreciated.

I'm puzzled why you want this.

Give this user a shell that doesn't accept "-c".
And don't let him change his shell. 

-- 
Elvis Notargiacomo  master AT barefaced DOT cheek
http://www.notatla.org.uk/goen/

Relevant Pages

  • Disallow command parameters from ssh connection
    ... I wonder is there an option can be set or some sort of wrapper (open ... source or commecial) which will disallow command paramter from a ssh ...
    (comp.security.ssh)
  • Re: SFTP is not working
    ... When I try to use sftp or scp2, I get a message like this: ... sftp and scp2 both actually work by running ssh in a subprocess, ... The reason the shell startup files are relevant at all, ...
    (comp.security.ssh)
  • Re: Did you hack into my UNIX server Bible Bob?
    ... But that's not a shell question. ... >> OSX users, should I be using ssh instead of telnet for security? ... OSX as a built in firewall tab. ...
    (comp.unix.shell)
  • Re: using ssh to run remote commands? [ssh -T, scp/ssh flags]
    ... I use SSH to forward connections between an intranet server at home and my ... To do this, the user on the remote machine need not have a shell, either ... start a shell on the remote host, ... you can have ssh run a command instead of an interactive shell by ...
    (FreeBSD-Security)
  • Re: UK Shell Provider
    ... http://templarshells.mine.nu Services include access to linux programs, ... "Access to the Templar Server is via Ssh (Secure Shell). ...
    (uk.telecom.broadband)