3 ms·
I really want a way to expose filesystem contents to someone via SSH without giving them the ability to execute arbitrary code. Bonus points for confining acces
by eptcyka 6y ago
I really want a way to expose filesystem contents to someone via SSH without giving them the ability to execute arbitrary code. Bonus points for confining access to specific directories.
- pseudalopex 6y agoWhy not SFTP?
- kevinoid 6y agohttps://github.com/scponly/scponly https://github.com/scponly/scponly can be used to prevent command execution and supports chroot. It avoids the server-side scp protocol security issues by rejecting shell metacharacters in commands. It also supports sftp. If you don't need scp, you could force the use of internal-sftp <https://serverfault.com/a/354618 https://serverfault.com/a/354618>.
- LinuxBender 6y agoSFTP chroot solves that. You can use the lftp client with the sftp and mirror subsystem to replicate the behavior of rsync. [1] [1] - https://serverfault.com/questions/836103/replace-scp-with-sftp/836136#836136 https://serverfault.com/questions/836103/replace-scp-with-sf...