4 ms·
I have seen enterprise systems where sftp access is granted to third parties by restricting the login shell severely to allow only sftp uploads. Is there a prob
by LogicHoleFlaw 18y ago
I have seen enterprise systems where sftp access is granted to third parties by restricting the login shell severely to allow only sftp uploads. Is there a problem with that approach? SOX / PCI is making the 'secure upload problem' more pressing daily.
- tptacek 18y agoYes, for instance: X11 and port forwarding. The bigger problem is, it's just hard to know what else you're allowing once you let someone "only" access SFTP via SSH. Most of the BigCo's I work with use "Secure File Transfer" software to solve this problem, which are just glorified upload CGI scripts under SSL. That's the best solution, I think.