Method to permit ssh while denying sftp

Jim Knoble jmknoble at pobox.com
Fri Apr 3 08:42:25 EST 2009


On 2009-04-02 11:21, Brenda Burnell (bburnell) wrote:

: Is there a way to permit ssh sessions while denying sftp with openssh
: 3.8?
: 
: In openssh 4.4+ this is possible using the Match directive with Force
: Command but I don't know how to configure this in older versions.
: 
: Thanks in advance for any guidance.

Are you sure you asked the question you intended to ask?

Permitting ssh while denying sftp makes no sense.  If a user has ssh
access, she can transmit files using any of the following methods:

    - Using 'scp' instead of 'sftp'
    - Executing 'sftp-server' manually
    - Executing another file transfer program, such as 'tar' or 'cat'

Perhaps you could explain in more detail what you're intending to allow
and prevent.

-- 
jim knoble  |  jmknoble at pobox.com  |  http://www.pobox.com/~jmknoble/
(GnuPG key ID: C6F31FFA  >>>>>>  http://www.pobox.com/~jmknoble/keys/ )
(GnuPG fingerprint: 99D8:1D89:8C66:08B5:5C34::5527:A543:8C33:C6F3:1FFA)


More information about the openssh-unix-dev mailing list