Limiting a user to scp and not ssh

On Thursday 20 June 2002 01:34 pm, Bill Warner wrote:
> I didn't think you needed to have a valid shell to run scp.

You need a valid shell to do anything with ssh. Essentially, scp and sftp
are wrappers for ssh that call '$SHELL -c scp/sftp'.

With the commercial ssh, there is a program called ssh-dummy-shell, but this
program is not available with OpenSSH. The following "shell" should do the
same thing. Note that it only allows scp and not sftp connections.

- --------

#include <string.h>

int main(int argc, char** argv) {
   if (--argc == 2 && strcmp("-c", *++argv) == 0  &&
       strcmp("scp", *++argv) == 0) {
      execl(SFTPSERVERPATH, SFTPSERVERPATH, NULL);
   }

exit(0);
}

- --------

Note that I have _not_ tested the above code, so wait for the reviews to
poor in. ;-)

- -- 
                        Logan Kennelly
      ,,,
     (. .)
- --ooO-(_)-Ooo--