Server-wide no-pty

Hi,

I am working on giving ssh access to a sourceforge like site. people need ssh access for 2 things, update their web pages and cvs. I am reluctant to give shell access to the uses as these can be done using rsync and cvs over ssh. I looked around the openssh docs including the O'Reilly book and what is recommended is to use no-pty in the key to provide cvs and rsync with out shell access.

But one problem with this approach is that, users will be able to over write their keys and gain access to the shell. I have search a lot but could not find a way to configure sshd so that it is in no-pty (or similar) mode so that people can use the server for rsync and cvs but not shell or login access.

My another question is how to enable logging for a chrooted sshd?

TiA

raj Received on Tue May 20 13:31:56 2003