new users shell set to /bin/false - are there any security issues?
i'm using a pretty much standard debian stable machine.......
i need to allow users FTP only access - i can create them with
#adduser --shell /bin/false <username>
in the /etc/proftpd.conf file i can set
RequireValidShell off
so that the proftpd server allows the users access even though they don't
have a valid shell.
but i'd like to know if there are any security considerations i should be
aware of with having a shell of /bin/false.
thanks,
kev
Reply to: