RE: allow only sftp?

From: Graeme Vetterlein <Graeme.Vetterlein(at)ntl.com>
Date: Fri Apr 11 2003 - 06:19:01 EDT

> setting the shell to /bin/false will stop subsystems from

If this does what it sounds like, seems a pretty dumb decision.

	I write a 'subsystem' in perl and expect the shell to be perl
	I write a 'subsysyem' in C and don't care what shell is ruuning just
exec(2) me
	I write a 'subsystem' in csh(1) and expect the shell to be csh(1) 

But no way does it make sense to run 'MY' system in the 'prefered shell' of 'HIM/HER' . In short it's the shell that the writer of the subsystem assumed which should be used
not the shell shell that the end user happens to like. The shell the writer should
assume is whatever one the ssh docs tell him it will be. So:         

	/bin/sh -c ${SUBSYSTEM}

or simply exec ${SUBSYSTEM}

Would be more reasonable??

--
Graeme


The contents of this email and any attachments are sent for the personal attention
of the addressee(s) only and may be confidential.  If you are not the intended
addressee, any use, disclosure or copying of this email and any attachments is
unauthorised - please notify the sender by return and delete the message.  Any
representations or commitments expressed in this email are subject to contract. 
 
ntl Group Limited

Received on Fri Apr 11 18:01:49 2003