Re: [CentOS] rssh / scponly

2011-03-29 Thread Gregory P. Ennis
On 28.3.2011 05:53, Tom Diehl wrote: > According to > https://bugzilla.redhat.com/show_bug.cgi?id=440240 and > http://rhn.redhat.com/errata/RHSA-2009-1287.html the ability to chroot was > backported into rhel/centos 5 back in 2009-09-02. > > In addition sshd_config(5) says the following: > > Sub

Re: [CentOS] rssh / scponly

2011-03-28 Thread Markus Falb
On 28.3.2011 05:53, Tom Diehl wrote: > According to > https://bugzilla.redhat.com/show_bug.cgi?id=440240 and > http://rhn.redhat.com/errata/RHSA-2009-1287.html the ability to chroot was > backported into rhel/centos 5 back in 2009-09-02. > > In addition sshd_config(5) says the following: > > Sub

Re: [CentOS] rssh / scponly

2011-03-27 Thread Tom Diehl
On Sun, 27 Mar 2011, Nico Kadel-Garcia wrote: > On Sun, Mar 27, 2011 at 10:12 PM, Gregory P. Ennis wrote: >>> Am 27.03.2011 um 22:57 schrieb John R Pierce: >>> On 03/27/11 1:03 PM, Rainer Duffner wrote: > If you use sftp, it can be chroot'ed by default (see man-page). > (In reasonabl

Re: [CentOS] rssh / scponly

2011-03-27 Thread Nico Kadel-Garcia
On Sun, Mar 27, 2011 at 10:12 PM, Gregory P. Ennis wrote: >> Am 27.03.2011 um 22:57 schrieb John R Pierce: >> >>> On 03/27/11 1:03 PM, Rainer Duffner wrote: If you use sftp, it can be chroot'ed by default (see man-page). (In reasonably recent version of sshd) >>> >>> I gather thats a ssh

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
> Am 27.03.2011 um 22:57 schrieb John R Pierce: > >> On 03/27/11 1:03 PM, Rainer Duffner wrote: >>> If you use sftp, it can be chroot'ed by default (see man-page). >>> (In reasonably recent version of sshd) >> >> I gather thats a sshd somewhat newer than the one included in CentOS 5 >> ? > > > I do

Re: [CentOS] rssh / scponly

2011-03-27 Thread Nico Kadel-Garcia
On Sun, Mar 27, 2011 at 4:57 PM, John R Pierce wrote: > On 03/27/11 1:03 PM, Rainer Duffner wrote: >> If you use sftp, it can be chroot'ed by default (see man-page). >> (In reasonably recent version of sshd) > > I gather thats a sshd somewhat newer than the one included in CentOS 5 > ?  the only m

Re: [CentOS] rssh / scponly

2011-03-27 Thread Eero Volotinen
2011/3/28 Rainer Duffner : > > Am 27.03.2011 um 22:57 schrieb John R Pierce: > >> On 03/27/11 1:03 PM, Rainer Duffner wrote: >>> If you use sftp, it can be chroot'ed by default (see man-page). >>> (In reasonably recent version of sshd) >> >> I gather thats a sshd somewhat newer than the one include

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
Am 28.03.2011 um 00:20 schrieb Gregory P. Ennis: > > I am running Centos 5.5. which has OpenSSH_4.3p2. I guess this > means I > am back to using rssh or scponlyc. So far I have not been able to get > either of these to work properly with chroot. > > Any suggestions ? > > I haven't been usin

Re: [CentOS] rssh / scponly

2011-03-27 Thread Rainer Duffner
Am 28.03.2011 um 00:20 schrieb Gregory P. Ennis: > > I am running Centos 5.5. which has OpenSSH_4.3p2. I guess this > means I > am back to using rssh or scponlyc. So far I have not been able to get > either of these to work properly with chroot. > > Any suggestions ? > > I haven't been usi

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
Am 27.03.2011 um 22:57 schrieb John R Pierce: > On 03/27/11 1:03 PM, Rainer Duffner wrote: >> If you use sftp, it can be chroot'ed by default (see man-page). >> (In reasonably recent version of sshd) > > I gather thats a sshd somewhat newer than the one included in CentOS 5 > ? I don't know. ;-)

Re: [CentOS] rssh / scponly

2011-03-27 Thread Gregory P. Ennis
> If you use sftp, it can be chroot'ed by default (see man-page). > (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ? the only mention of chroot in man sshd is the /var/empty/sshd dir used during preauthorization. I'd be very cautio

Re: [CentOS] rssh / scponly

2011-03-27 Thread Rainer Duffner
Am 27.03.2011 um 22:57 schrieb John R Pierce: > On 03/27/11 1:03 PM, Rainer Duffner wrote: >> If you use sftp, it can be chroot'ed by default (see man-page). >> (In reasonably recent version of sshd) > > I gather thats a sshd somewhat newer than the one included in CentOS 5 > ? I don't know. ;-

Re: [CentOS] rssh / scponly

2011-03-27 Thread John R Pierce
On 03/27/11 1:03 PM, Rainer Duffner wrote: > If you use sftp, it can be chroot'ed by default (see man-page). > (In reasonably recent version of sshd) I gather thats a sshd somewhat newer than the one included in CentOS 5 ? the only mention of chroot in man sshd is the /var/empty/sshd dir used d

Re: [CentOS] rssh / scponly

2011-03-27 Thread Rainer Duffner
Am 27.03.2011 um 21:53 schrieb Gregory P. Ennis: > List, > > I am putting together a sftp server and would like to use a > restrictive > shell with a chroot jail. I was wondering what members of the list > thought about rssh as opposed to scponly. If you use sftp, it can be chroot'ed by defa