-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Ehud Karni wrote: | On Fri, 4 Jun 2004 23:27:59 +0000, Diego Iastrubni <[EMAIL PROTECTED]> wrote: | |>>I want some users to be able to upload files to some site.The solution used |>>right now, is getting the private ssh keys from the users, and letting the |>>users to use "scp" to copy files to the remote server. |>> |>>However, I discovered that I can use "ssh [EMAIL PROTECTED] sh" to get a basic |>>shell on the box, and delete files on that dir (or others). | | | I had the same problem. | | As Ilya Konstantinov and Alex Behar wrote, If you need only to | permit uploading, you can do it easily as they suggested. If you | need some more options (such as secure downloading) see below. | | My solution was to jail the user by "chroot" by using 2 programs I | wrote. With this option you can restrict what they can do. |
There's a chroot patch for openssh:
http://chrootssh.sourceforge.net/index.php
- -- Meir Kriheli -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFAxQ0QRkS5DWK1mZkRAqjBAKC8grC5EcUJtB3rSkgA57MvjGyYgwCeP0VV CBv1JoebeFhSNkrmI+4kB/g= =Onca -----END PGP SIGNATURE-----
================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
