rssh
rssh is a small shell that provides the ability for system administrators to give specific users access to a given system via scp or sftp only.
| Tags | Security |
|---|---|
| Licenses | BSD Revised |
| Operating Systems | POSIX |
| Implementation | C |
Recent releases
- 27 Apr 2006 22:44
Changes: A root compromise bug was fixed. A va_start/va_end bug that crashed on ia64 was fixed. A strlen() segfault was fixed. A service checking bug that always allows cvs and always denies rdist and rsync was fixed. Other small code clean-up fixes were done. Many documentation updates and improvements were made.
- 18 Dec 2005 08:28
Changes: This release fixes a design flaw in rssh_chroot_helper that allowed local users with full shell access to gain root privileges.
- 27 Jun 2004 03:30
Changes: This release features support for using rssh with CVS, rdist, and rsync. A very minor security issue has also been fixed.
- 20 Jul 2003 17:56
Changes: This release is functionally identical to the previous release. The only modifications made were to the build environment, to facilitate building packages. Official RPMs for Red Hat 8 and 9 are now available.
- 07 Jul 2003 16:55
Changes: New per-user configuration options, and fixes for several previously undiscovered/unreported buglets.
- All comments
Recent commentsRe: Whats wrong with putting 'logout' in .bash_profile?
> And chown'ing that file too root?
During an SSH login the user can select a program to run, it may be possible to bypass the .bash_profile. SSH uses the user's shell to exec this program, so the shell itself can not be bypassed.
I.E. bash's --noprofile option.
What's wrong with rssh 2.3.0 tarball?
Strange, but every SourceForge mirror gives me corrupted files while trying downloading rssh 2.3.0 source code. But at the same time previous releases files downloaded OK.
Whats wrong with putting 'logout' in .bash_profile?
And chown'ing that file too root?
I'm a bit lost with rssh
So can anyone give me an example of command to rsync with rssh?
Anything like rsync some_dir restricteduser@host:~/another_dir give me errors.