OpenSSH 3.2.2 released : chroot

Ben Lindstrom mouring at etoh.eviladmin.org
Sat May 18 02:05:07 EST 2002


Out of interest why do you feel it's required to do chroot() at the
OpenSSH level?  Why don't you invest time into a shell that does the
chroot() for you?  That would work for telnet, ssh, etc. No need to
clutter up OpenSSH with options that can easily be implemented at a higher
level.

- Ben

On Fri, 17 May 2002, Jean-Michel POURE wrote:

> Le Vendredi 17 Mai 2002 15:55, Nicolas.Williams at ubsw.com a écrit :
> > You must mean your most wanted feature. Mine is the integration of Simon's
> > GSS patches.
>
> I agree Simon's GSS patches are very interesting. I was planning to install a
> Kerberos V5 authentication server. My primary need is to be sure SSH users
> will not browse other accounts ... or use SSH commands to connect to other
> machines.
>
> OpenSSH is too powerfull not to have a real chroot environment. Chroot may be
> the last reason why some users turn to commercial SSH.
>
> Cheers,
> Jean-Michel
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
>




More information about the openssh-unix-dev mailing list