scponly has been removed from Debian packages. I'm using scp to pull backups from a Debian 8 server and for previous Debian servers I've set the login shell to scponly in order to restrict the backup user. What is a good replacement shell for scponly, or what configuration can be made to sshd to provide security equivalent to scponly?
Asked
Active
Viewed 3,004 times
3
RjOllos
- 131
- 1
- 4
-
Maybe [rssh](http://www.pizzashack.org/rssh/) with `allowscp` uncommented in `/etc/rssh.conf` is a good solution? – RjOllos Oct 03 '15 at 17:35
-
1http://serverfault.com/a/507899/120438 is not quite a duplicate, but the answer might be applicable. – Jenny D Oct 04 '15 at 09:52
-
Thanks @jenny-d. In addition to using `rssh` I've restricted based on hostname as described in the answer. – RjOllos Oct 05 '15 at 20:59
-
This is discussed at http://serverfault.com/q/83856/107832 – koppor Nov 15 '15 at 18:51