List of allowed commands to run

perret.yannick perret.yannick at free.fr
Sat May 19 08:00:30 EST 2007


Peter Stuge wrote:
> On Fri, May 18, 2007 at 08:18:24PM +0200, perret.yannick wrote:
>   
>> So my questions:
>> - is there a simplier/nicer way to do that (or even maybe it is
>> still possible without any change)
>> - does my modification is correct (I mean is it the good way to
>> perform a such modification)?
>>     
>
> This problem is better solved by the shell. All commands that sshd
> execute on behalf of the client use the shell, and since there may
> be other ways for the user to access the system, sshd is not a very
> good place for these restrictions.
>   
Well, it may be a way. In this case we should use the ForceCommand to
set the restricted shell, right?

Thanks for the hints.

Regards,
--
Yannick Perret



More information about the openssh-unix-dev mailing list