[BUGTRAQ] rssh and scponly arbitrary command execution

Peter Stuge stuge-openssh-unix-dev at cdy.org
Sat Dec 4 05:23:04 EST 2004


On Fri, Dec 03, 2004 at 09:00:28AM -0500, Jim Knoble wrote:
> In the most restricted case entire command lines would be stored on
> the remote host and the client would be allowed only to select from
> the list of available command lines.  I'm not aware of any software
> that offers these capabilities today.

You could do something like that with local subsystems, but IIRC sshd
still uses the shell to start subsystems.


//Peter




More information about the openssh-unix-dev mailing list