Re: secure port forwarding without shell access

From: Andrew Schulman (andrex_at_deadspam.com)
Date: 09/29/04 

Date: Wed, 29 Sep 2004 15:09:44 -0400

> Those users that are "restricted" have been usermod -s "/bin/rbash"
> username
> and /bin/rbash mode is 755 owned by root and contains :
>
>
> #!/bin/bash
> /bin/bash -r >/dev/null 2>&1
> tail -f /dev/null

Why not just give them a shell of /bin/false? Then they can't have
shell access at all, but they can still forward ports. 

-- 
To reply by email, change "deadspam.com" to "alumni.utexas.net"