Re: question about SSH / IPTABLES
you may also try rbash as a shell type (in /etc/passwd), it is not super
secure, and people can still use their own binaries, but you can
restrict them to their own home directory and whatevers in their path.
Its lazy persons way out of doing chroots for all. more info in the man
for bash
VRT <-- underpants on his head
On Thu, 2003-01-23 at 14:39, Rolf Kutz wrote:
> * Quoting DEFFONTAINES Vincent (Vincent.DEFFONTAINES@coe.int):
>
> > 2. Mount /home, /tmp and any other place users might have write access on
> > with the "noexec" switch, so they can only use binaries installed (and
> > allowed to them) on the system.
>
> This does not prevent them from executing
> binaries. This has been discussed here before.
>
> - rk
>
> --
> "What sort of person," said Salzella patiently, "sits down and writes a
> maniacal laugh? And all those exclamation marks, you notice? Five? A
> sure sign of someone who wears his underpants on his head. Opera can do
> that to a man."
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: