[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: login access to change account password only

On Wednesday 10 March 2004 13.30, Francis Tyers wrote:
> set the login shell for the user in /etc/passwd to be /usr/bin/passwd?
> just tested it and it seems to work...

I don't exactly know how ssh works - are you sure that it always executes 
anything via the shell on the remote side? Setting up rssh I've read seen 
docs about how careful the rssh developers had to be so that the user can't 
somehow induce the ssh server to execute some other command instead of 
sftp/scp. Most of the issues centered around the user (re)placing files in 
~/.ssh, but I'm not sure if this were all issues.

-- vbi

OpenPGP encrypted mail welcome - my key: http://fortytwo.ch/gpg/92082481

Attachment: pgpAszIUgXWfu.pgp
Description: signature

Reply to: