ssh_config forced-commands-only option

From: Dave Markham (dave.markham@fjserv.net)
Date: Fri Mar 16 2007 - 10:50:49 EST


People i know about the PermitRootLogin forced-commands-only option and
how it doesnt allow shell and only runs the command if in the
authorized_keys file for destination has command="somecommand" before
the key.

However if the key on destination doesn't have the command= option
preceding the key it seems i can get a shell as root on remote machine.
I thought the forced-commands-only would bum out if there wasnt a
command= in the authorized_keys file.

anyone any ideas?

Obviously i can make sure command= is there but id like ssh to not
connect or bum out if it isnt.

Cheers
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:41:46 EDT