Re: scp and sftp

[Jon McCain <jmccain@davlong.com>]

> 
> > The user can change to directories above their home.
> > Is there a way to chroot them
> 
> Use restricted bash shell for the user (/bin/rbash) in the
> /etc/passwd.
> 

This does not seem to affect sshd.  I changed a user to use rbash but I
could still go to a windows machine and use the putty program pscp to
get a file from /etc.   

pscp johndoe@192.168.1.10:/etc/passwd passwd.txt


Maybe it's simply just not a feature of openssh. I think I'll
investigate that chroot patch to sshd someone mentioned.  I think they
said it was for woody, but I'll see if it works with potato.


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org