[Bug 959] enhancement: supporting a remote scp path option in scp

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Dec 6 17:36:22 EST 2004


------- Additional Comments From dlssh at leach.net.au  2004-12-06 17:36 -------
My reason for wanting is that it means server side scripts that wrapper
forced commands can tie scp down to the absolute path.  

When scp is executed is PATH being determined by the user shell (by virtue of
the fact that sshd is doing a sh -c force_cmd)?  In a restricted environment
this would allow me to pattern match against the SSH_ORIGINAL_COMMAND, and I
would rather be matching against an absolute (^/usr/bin/scp...$) command than a
relative one (^scp...$).  Perhaps my fears wrt relative path are unfounded..

Maybe this is unnecessary?
a) because it isn't possible for a user to abuse the PATH variable; or 
b) because the PATH variable can be forced in .ssh/environment

I fine with this patch being rejected if there's a better way to achieve what I
want to do.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the openssh-bugs mailing list