[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Script for a CVS only shell available?

From: Mark D. Baushke
Subject: Re: Script for a CVS only shell available?
Date: Tue, 29 Jul 2003 01:23:14 -0700

Julien Wajsberg <address@hidden> writes:

> Another simple way is to use some features of SSH and the authorized_keys
> file.
> You can use the  « command="command" » option of this file
> (see man 8 sshd for more information)
> man's extract:
>      command="command"
>              Specifies that the command is executed whenever this key is
> used
>              for authentication.  The command supplied by the user (if any)
> is
>              ignored.
> Hope this helps :)

Yup, you just need to make sure that sftp or scp or rcp or tftp or ftp
(or some other method of updating their file) to the user whack their
.ssh/authorized_keys file which would let them subvert the security of
using command="cvs" (or whatever you allow).

        -- Mark

reply via email to

[Prev in Thread] Current Thread [Next in Thread]