[Bug 1172] [PATCH] Restrict public key authentication to scp access only

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Jun 13 13:30:58 EST 2008


https://bugzilla.mindrot.org/show_bug.cgi?id=1172


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX
                 CC|                            |djm at mindrot.org




--- Comment #4 from Damien Miller <djm at mindrot.org>  2008-06-13 13:30:54 ---
OpenSSH now has a "Match" directive that supports proscriptive control
of the user's command. We won't be building in special glue for scp,
but you can use it (along with the new chroot support) to force users
to be able to run sftp only.

If you absolutely require scp, then you can use the same mechanism to
force them to use a restrictive shell like "scponly".

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list