[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Script for a CVS only shell available?
From: |
Mark D. Baushke |
Subject: |
Re: Script for a CVS only shell available? |
Date: |
Tue, 29 Jul 2003 01:23:14 -0700 |
Julien Wajsberg <address@hidden> writes:
> Another simple way is to use some features of SSH and the authorized_keys
> file.
>
> You can use the « command="command" » option of this file
> (see man 8 sshd for more information)
>
> man's extract:
> command="command"
> Specifies that the command is executed whenever this key is
> used
> for authentication. The command supplied by the user (if any)
> is
> ignored.
>
>
> Hope this helps :)
Yup, you just need to make sure that sftp or scp or rcp or tftp or ftp
(or some other method of updating their file) to the user whack their
.ssh/authorized_keys file which would let them subvert the security of
using command="cvs" (or whatever you allow).
Enjoy!
-- Mark