Slashdot Mirror

← Back to Domains

Domain: pizzashack.org

Stories and comments across the archive that link to pizzashack.org.

Comments · 6

  1. RSSH ? by ElberethZone · · Score: 1 · on Chroot in OpenSSH

    This looks similar to the features in RSSH http://www.pizzashack.org/rssh/...

  2. Re:misleading... by Captain_Carnage · · Score: 1 · on When Not to Use chroot

    I posted to a forum asking what the best method was to jail SFTP users. I wanted something like FTP, but secure, and I didn't want users to be able to browse the whole filesystem. Some security expert chimed in basically calling me a moron, that if I didn't want people to browse the whole filesystem, I should use FTP and jail people. A lot of people in the forum agreed.

    Maybe they're not as expert as they think... at least two programs exist which provide this. One is called scponly. The other is called rssh, which is what I recommend you use, mainly because I wrote it. :)

    As problems go, security sucks... to be effective, you DO just about need to be an expert, generally; and if you're not, you're probably just wasting your time. So, if you need security, be prepared to read ALL the documentation THOROUGHLY, and then when you're done, read it again. And then hope you didn't miss anything important when you configure your solution, or at least that no one is particularly hell-bent on breaking into your stuff. Otherwise, you'll lose.
  3. Re:misleading... by Anonymous Coward · · Score: 0 · on When Not to Use chroot

    Did you look at rssh?
    http://www.pizzashack.org/rssh/
    it might be worth a google

  4. For the love of Freshmeat... by msimm · · Score: 1 · on When Not to Use chroot

    I've wondered about this myself, but ages ago. Since then I've found that in my particular situation it's not needed (VPN/SSH/WEBDAV). But a quick check on Freshmeat shows at least 2 possibilities: scponly, rssh.

    I get that using a wrapper program like either of these is kind of cockeyed, but SFTP *is* the most commonly supported secure transfer protocol (webdav/ssh, but not nearly as drop-in for Dreamweaver users, etc).

    Anyway, I think it's safe to say the *nix community is now big enough that most itches have at least been attempted to scratch. And FTR, there are assholes in every community, sounds like you just had a spot of bad luck.

  5. Solve the problem with RSSH by Anonymous Coward · · Score: 0 · on Arkeia Network Backup Agent Remote Access

    The rssh restricted shell can prevent arbitrary command execution with rsync:

    http://www.pizzashack.org/rssh/index.shtml

  6. Re:I've got an idea by Hatta · · Score: 1 · on DCC2 Protocol for IRC file transfers

    That's what rssh is for.