On 03/09/18 12:55, Russ Allbery wrote:
Unfortunately, rssh is basically dead upstream and the configuration file
syntax is not particularly extensible, so I've been very reluctant to add
support for new programs as further patches against the Debian package.
It can be tricky to get the security properties right, and since I
wouldn't be personally using it, I'm not at all sure I'd be able to make
it secure.
Understood. (After submitting this I found the launchpad issue
https://bugs.launchpad.net/ubuntu/+source/rssh/+bug/734530 also).
It looks like git-shell can be easily extended to add other commands, so
the easiest solution for me might be to use git-shell with svnserve
command added, as in:
https://stackoverflow.com/questions/14460967/custom-commands-with-git-shell
Or use a custom script with the ssh authorized_keys forced command
feature, as in:
https://joeyh.name/blog/entry/locking_down_ssh_authorized_keys/
thanks,
Hamish
