Opionions on user lock down...

2007-12-25 3:29:00

Hey kids... I'd like your thoughts on something...

I need to set up a user to allow an SCP only into a file transfer server,
coming from outside our company (via VPN). Basically all the user needs to
do is scp in and grab a file from their home directory. Maybe also SSH in and
just be able to do an "ls -la" to see their files.

I was thinking of using a rksh, with a .profile (owned by root) that sets
their PATH to a /usr/local/rbin that only contains the ls binary.

Is this enough? Any suggestions anyone has would be appreciated.

Thanks in advance
-Gene Siepka

Comments

Got something to say?

You must be logged in to post a comment.