Re: Restricting RSA Authentication.

[Carlos Carvalho]

Stephen Carville ([EMAIL PROTECTED]) wrote on 16 January 1999 08:59:
 >John Riddoch wrote:
 >> 
 >> Shiloh Costa wrote:
 >> > What kinds of methods could someone use to only allow 2 or 3 users to have
 >> > SSH capability, and deny anyone else from creating their own .ssh subdir
 >> > via FTP?
 >> >
 >> > The only way I can think of is to pre-create an .ssh directory, and chown
 >> > it to root with no write permissions.
 >> 
 >> Doesn't work; since the user has rwx permission in their home directory,
 >> they can just delete anything below it.
 >
 >Create a file in .ssh owned by root with owner write only.  Change the
 >owner of .ssh to root and set it owner write only.  Now the user cannot
 >delete the directory.

Ugly :-)

What's wrong with the AllowUsers config option for sshd????