ssh-dummy-shell

[Markus Friedl]

well, do we really need this?

i think you just could use sftp-server as a loginshell and have the
same effect.

are there any problems if we set the loginshell to sftp-server? for
interactive logins nothing happens, and it even works with sftp over
both protocol version 1 and 2.

are there any risks?

all ssh-dummy-shell is restrict the possible commands to sftp-server
and prints an error message if the shell is used without the sftp
client. so it's a little bit more user friendly.

On Fri, Nov 23, 2001 at 11:57:15AM -0700, Craig Davison wrote:
> Are there any plans to write an OpenSSH version of ssh.com's
> ssh-dummy-shell utility?
> 
> Here's a copy of the man page for this utility:
> http://www.cs.duke.edu/cgi-bin/man.cgi?section=1&topic=ssh-dummy-shell
> 
> Basically, it's a replacement for /sbin/nologin that can launch
> sftp-server.
> 
> If there's already a way to give a user scp and/or sftp access but not
> shell access, please point me to a page explaining how.
> 
> Thanks in advance
> 
> -- 
> Craig Davison
> SecurityFocus
> (403) 213-3939 ext. 228
> 
>