On Wed, Jul 11, 2001 at 10:23:23AM +1000, Michael Burbury wrote:
> Hi there all,
>
> While reading the MAN page on sshd, I see:
>
>
> AllowTcpForwarding
> Specifies whether TCP forwarding is permitted. The default is
> "yes''. Note that disabling TCP forwarding does not improve se-
> curity unless users are also denied shell access, as they can al-
> ways install their own forwarders.
>
> I wish to disable Shell access but keep the File Transfer available.
> (As in I only wish to allow my users to transfer files to/from their
> respective directories but not have any method of gaining shell access to
> perform commands)
>
> Would someone know what options I need to set in ssh_config?
Take a lookie here and see if you can apply the basic SSH principles
to OpenSSH:
http://www.snailbook.com/faq/restricted-scp.auto.html
-- Tim
