Re: AW: sftponly

On Tue, 24 Jun 2003 Michael.Eisele@t-systems.com wrote:

> Why isn't it possible to use an mechanism like it is provided with the

Please tell me you truly don't believe that.. Yes it is still possible for them to break out. Another glob() bug, libc attack, kernel bug, or any buffer overflow by bad coding pratice in the application will still let the attacker have a keyhole access.

Just because you don't use the master /etc/passwd does not mean much. This just gives you the ability to have to have a 'jjohns@' login for each vhost.

• Ben