Re: [CentOS] rssh / scponly

2011-03-29 Thread Gregory P. Ennis
On 28.3.2011 05:53, Tom Diehl wrote: According to https://bugzilla.redhat.com/show_bug.cgi?id=440240 and http://rhn.redhat.com/errata/RHSA-2009-1287.html the ability to chroot was backported into rhel/centos 5 back in 2009-09-02. In addition sshd_config(5) says the following: Subsystem

Re: [CentOS] rssh / scponly

2011-03-28 Thread Markus Falb
On 28.3.2011 05:53, Tom Diehl wrote: According to https://bugzilla.redhat.com/show_bug.cgi?id=440240 and http://rhn.redhat.com/errata/RHSA-2009-1287.html the ability to chroot was backported into rhel/centos 5 back in 2009-09-02. In addition sshd_config(5) says the following: Subsystem

[CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
List, I am putting together a sftp server and would like to use a restrictive shell with a chroot jail. I was wondering what members of the list thought about rssh as opposed to scponly. Greg Ennis ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] rssh / scponly

2011-03-27 Thread Rainer Duffner
Am 27.03.2011 um 21:53 schrieb Gregory P. Ennis: List, I am putting together a sftp server and would like to use a restrictive shell with a chroot jail. I was wondering what members of the list thought about rssh as opposed to scponly. If you use sftp, it can be chroot'ed by default

Re: [CentOS] rssh / scponly

2011-03-27 Thread John R Pierce
On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ? the only mention of chroot in man sshd is the /var/empty/sshd dir used

Re: [CentOS] rssh / scponly

2011-03-27 Thread Rainer Duffner
Am 27.03.2011 um 22:57 schrieb John R Pierce: On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ? I don't know. ;-) I

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ? the only mention of chroot in man sshd is the /var/empty/sshd dir used during preauthorization. I'd be very

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
Am 27.03.2011 um 22:57 schrieb John R Pierce: On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ? I don't know. ;-) I only

Re: [CentOS] rssh / scponly

2011-03-27 Thread Rainer Duffner
Am 28.03.2011 um 00:20 schrieb Gregory P. Ennis: I am running Centos 5.5. which has OpenSSH_4.3p2. I guess this means I am back to using rssh or scponlyc. So far I have not been able to get either of these to work properly with chroot. Any suggestions ? I haven't been using

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
Am 28.03.2011 um 00:20 schrieb Gregory P. Ennis: I am running Centos 5.5. which has OpenSSH_4.3p2. I guess this means I am back to using rssh or scponlyc. So far I have not been able to get either of these to work properly with chroot. Any suggestions ? I haven't been using

Re: [CentOS] rssh / scponly

2011-03-27 Thread Eero Volotinen
2011/3/28 Rainer Duffner rai...@ultra-secure.de: Am 27.03.2011 um 22:57 schrieb John R Pierce: On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one

Re: [CentOS] rssh / scponly

2011-03-27 Thread Nico Kadel-Garcia
On Sun, Mar 27, 2011 at 4:57 PM, John R Pierce pie...@hogranch.com wrote: On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ?

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
Am 27.03.2011 um 22:57 schrieb John R Pierce: On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ? I don't know. ;-) I

Re: [CentOS] rssh / scponly

2011-03-27 Thread Nico Kadel-Garcia
On Sun, Mar 27, 2011 at 10:12 PM, Gregory P. Ennis po...@pomec.net wrote: Am 27.03.2011 um 22:57 schrieb John R Pierce: On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) I gather thats a sshd

Re: [CentOS] rssh / scponly

2011-03-27 Thread Tom Diehl
On Sun, 27 Mar 2011, Nico Kadel-Garcia wrote: On Sun, Mar 27, 2011 at 10:12 PM, Gregory P. Ennis po...@pomec.net wrote: Am 27.03.2011 um 22:57 schrieb John R Pierce: On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably