* [sisyphus] Кто собирает sshd?
@ 2004-05-08 7:42 Anatol A. Ivanov
2004-05-08 9:04 ` [sisyphus] chrootssh Dmitry V. Levin
0 siblings, 1 reply; 2+ messages in thread
From: Anatol A. Ivanov @ 2004-05-08 7:42 UTC (permalink / raw)
To: sisyphus
Здравствуйте, sisyphus.
Может включите в сборку патч для ограничения пользователей chroot
http://sourceforge.net/projects/chrootssh/
Тему создавал тут:
http://lists.altlinux.ru/pipermail/community/2004-May/120787.html
Спасибо.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [sisyphus] chrootssh
2004-05-08 7:42 [sisyphus] Кто собирает sshd? Anatol A. Ivanov
@ 2004-05-08 9:04 ` Dmitry V. Levin
0 siblings, 0 replies; 2+ messages in thread
From: Dmitry V. Levin @ 2004-05-08 9:04 UTC (permalink / raw)
To: ALT Linux Sisyphus mailing list
[-- Attachment #1: Type: text/plain, Size: 781 bytes --]
Hi,
On Sat, May 08, 2004 at 11:42:56AM +0400, Anatol A. Ivanov wrote:
> Может включите в сборку патч для ограничения пользователей chroot
> http://sourceforge.net/projects/chrootssh/
Цитирую vsftpd.conf(5):
This option has security implications, especially if the users have upload
permission, or shell access. Only enable if you know what you are doing.
Note that these security implications are not vsftpd specific. They apply
to all daemons which offer to put local users in chroot() jails.
Прочтите также
http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=107283465523133&w=2
и скажите, по-прежнему ли вы хотите включить этот патч, и если да, то
почему.
Кстати говоря, посмотрите на эту тему
ftp://ftp.altlinux.org/pub/people/ldv/rshell/
--
ldv
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-05-08 9:04 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2004-05-08 7:42 [sisyphus] Кто собирает sshd? Anatol A. Ivanov
2004-05-08 9:04 ` [sisyphus] chrootssh Dmitry V. Levin
ALT Linux Sisyphus discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus/0 sisyphus/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus sisyphus/ http://lore.altlinux.org/sisyphus \
sisyphus@altlinux.ru sisyphus@altlinux.org sisyphus@lists.altlinux.org sisyphus@lists.altlinux.ru sisyphus@lists.altlinux.com sisyphus@linuxteam.iplabs.ru sisyphus@list.linux-os.ru
public-inbox-index sisyphus
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git