Re: scp, no ssh

[Bennet Uk <bennet@portierhaus.ch>]

Hi,

Found something which looks like it might do the trick:

http://www.sublimation.org/scponly/

Haven't tried it myself, though...

Regards,
Bennet

On Thu, 2002-01-10 at 05:51, Jeff Norman wrote:
> 
> Now, the trick is to replace bob's shell with a (perl?) script that
> takes -c argument passed and checks if scp is the intended command.
> If scp *isn't* the intended command, it merely exits, thus closing the
> remote connection and effectively denying access to other commands.
> If scp *is* what was requested, the script could just exec scp with the
> requested options in place of itself and everything should continue as
> normal. If you wanted to, you could even get really fancy and have the
> script deny access to certain directories or types of files. 
> 
> Of course, I don't imagine that the ssh/scp combo was intended to be
> used like this, so one should be careful while implementing, but other
> than that, the only downside I can think of is that the user on the
> remote system becomes useless for any purpose other than scp-ing.
> 
> 
> Hope that makes sense.
> Later,
> 
> Jeff
>