Re: Server-wide no-pty

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rajkumar S wrote:

> similar) mode so that people can use the server for rsync and cvs but

I got what I want in a truly bizzare way. Having failed deny shell I was looking for restricted bash as a compromise. To enable restricted bash bash has to be called as rbash. I edited the sources and changed that to   bash itself and compiled it with

$ ./configure --enable-minimal-config --enable-restricted - --disable-disabled-builtins --disable-xpg-echo-default --enable-static-link

and put that as the shell for my (chrooted) ssh. and it worked!! login is not allowed, while rsync and cvs is possible. But I have no idea how it worked.

> My another question is how to enable logging for a chrooted sshd?

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

This question remains though !

raj
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+y6cWg/KquOAub0IRAhzHAKDaCKmFuku0LgDSaONDetYieF17/wCeK3mq 6/ajdoZHrvYvZ7/hF5246RU=
=WVMK
-----END PGP SIGNATURE----- Received on Wed May 21 13:41:17 2003