[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: restricted shell



-----BEGIN PGP SIGNED MESSAGE-----

On Sat, 21 Aug 1999, J Horacio MG wrote:

> > bash has a -r option, this may bee what you want.
> 
> Fine, I somehow thought there existed some sort of restrictive shell.
> How do you create such a user... ie. a user with a default bash -r
> shell?

Checking the manpage, bash gives the same effect if started as "rbash".
The Debian bash package automatically installs the /bin/rbash symlink, so
all you have to do is change the user's shell in /etc/passwd.

> > ssh is definately the way you'll want to go. [...]
> 
> That's what I was hoping for...  I downloaded ssh2 (.tgz'ed and
> .deb'ed).  Say, both machines are running under Linux with a
> dial-on-demand connection (one pc and the other laptop)... would I be
> able from machine2 to log into machine1 and do all sort of fiddling
> including upgrades?

Unless machine2 is the only box that you'll use to connect to machine1,
you may want to install the ssh package as well in case you ever land on a
box with only version 1 ssh.

You should be able to do just about anything over the ssh channel that you
can do sitting at the console. Make sure that it can boot unattended (and
reconnect automatically to the net if necessary) if you plan to reboot it
;) Once i even downloaded, recompiled, and installed a new kernel sshing
in from a windoze box.

- -- 
  finger for PGP public key.


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBN77ffL7M/9WKZLW5AQG32gP7B+hEg32Rgg8OJsi3McBoqUFq696gpkGL
A8G/guNq62KqP2yOncZ0huzYKXu6tdEs7hUSSkI25b2CQn+UY5q26jRqQgC4ctBQ
klRkCnsyYeDnOjGztiTIaNms/kHYHx1DUrkGSLBk7oVVl1ofjelMgp1MgqiK4sD9
j7c+PsDtBoM=
=qHo3
-----END PGP SIGNATURE-----


Reply to: