RE: allow only sftp?

[..]
> assume is whatever one the ssh docs tell him it will be. So:

/bin/sh -c ${SUBSYSTEM)

because it takes into account the user's environment. Which may be an important piece of the puzzle.

This conversation has come up in the past and the results have always come back the same. /bin/sh -c ${SUBSYSTEM) is more sane then exec ${SUBSYSTEM) from the administrative view point (Read: if I set a user's account to /usr/bin/cvs.. I sure the hell don't want him running random subsystems that I may have enabled for other users).

• Ben