-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ehud Karni wrote:
| On Fri, 4 Jun 2004 23:27:59 +0000, Diego Iastrubni
<[EMAIL PROTECTED]> wrote:
|
|>>I want some users to be able to upload files to some site.The
solution used
|>>right now, is getting the private ssh keys from the users, and
letting the
|>>users to use "scp" to copy files to the remote server.
|>>
|>>However, I discovered that I can use "ssh [EMAIL PROTECTED] sh" to get a
basic
|>>shell on the box, and delete files on that dir (or others).
|
|
| I had the same problem.
|
| As Ilya Konstantinov and Alex Behar wrote, If you need only to
| permit uploading, you can do it easily as they suggested. If you
| need some more options (such as secure downloading) see below.
|
| My solution was to jail the user by "chroot" by using 2 programs I
| wrote. With this option you can restrict what they can do.
|

There's a chroot patch for openssh:

http://chrootssh.sourceforge.net/index.php

- --
Meir Kriheli
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAxQ0QRkS5DWK1mZkRAqjBAKC8grC5EcUJtB3rSkgA57MvjGyYgwCeP0VV
CBv1JoebeFhSNkrmI+4kB/g=
=Onca
-----END PGP SIGNATURE-----

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Reply via email to