Re: scp and sftp
>
> > The user can change to directories above their home.
> > Is there a way to chroot them
>
> Use restricted bash shell for the user (/bin/rbash) in the
> /etc/passwd.
>
This does not seem to affect sshd. I changed a user to use rbash but I
could still go to a windows machine and use the putty program pscp to
get a file from /etc.
pscp johndoe@192.168.1.10:/etc/passwd passwd.txt
Maybe it's simply just not a feature of openssh. I think I'll
investigate that chroot patch to sshd someone mentioned. I think they
said it was for woody, but I'll see if it works with potato.
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: