scp without permitting shell access, possible?

Rachit Siamwalla rachit at ensim.com
Fri Dec 15 13:54:52 EST 2000


I did it in a very stupid, but simple way, implement a simple version of
scp through a restricted shell.

Which usually ends up going something like this:

ssh hostname cat file > destfile

where your restricted shell is /bin/cat

Jos Backus wrote:
> 
> [My apologies if this question is deemed inappropriate for this list.]
> 
> Using OpenSSH, is it possible for a program/script to copy files with known
> filenames from a remote server (running sshd), without allowing (interactive)
> ssh access to that server? I.e. ``ssh server ls'' or ``ssh server'' should not
> be possible (for security reasons), but ``scp server:file .'' should.
> 
> Thanks,
> --
> Jos Backus                 _/  _/_/_/        "Modularity is not a hack."
>                           _/  _/   _/                -- D. J. Bernstein
>                          _/  _/_/_/
>                     _/  _/  _/    _/
> josb at cncdsl.com     _/_/   _/_/_/            use Std::Disclaimer;





More information about the openssh-unix-dev mailing list