Locking down SSH with rssh
Sunday, July 31, 2011 8:15:18 AM
Want to setup a user account on your server to allow scp/sftp access but not shell (ssh) with openSSH?
Use your favorite package manager to install the ‘rssh’ package:
Then edit the config file in your favorite text editor to uncomment sftp and scp (and whatever you’d like):
Now create a user account with the shell set to rssh (/usr/bin/rssh) and set a password for the account:
Tada! The newly created user will now be allowed to use sftp and scp, but not allowed to ssh into your server.
Use your favorite package manager to install the ‘rssh’ package:
apt-get install rssh
Then edit the config file in your favorite text editor to uncomment sftp and scp (and whatever you’d like):
nano /etc/rssh.conf
Now create a user account with the shell set to rssh (/usr/bin/rssh) and set a password for the account:
useradd -m -g users -s /usr/bin/rssh usernamehere passwd usernamehere
Tada! The newly created user will now be allowed to use sftp and scp, but not allowed to ssh into your server.
