Re: chroot jail for user with rssh

2019-03-28 Thread basti
nel 0 pid 12078 >> debug1: session_exit_message: release channel 0 >> Received disconnect from 2.206.185.146 port 45296:11: disconnected by user >> Disconnected from 2.206.185.146 port 45296 >> ... >> debug1: audit_event: unhandled event 12 > > that last line is a bi

Re: chroot jail for user with rssh

2019-03-28 Thread Peter Wiersig
basti writes: > On 28.03.19 08:21, Peter Wiersig wrote: >> basti writes: > Try scp: > > /usr/sbin/sshd -d -p > > Starting session: command for alice from 2.206.185.146 port 45296 id 0 So that reads as if all is fine, but then the next line indicates that the client has terminated the connec

Re: chroot jail for user with rssh

2019-03-28 Thread basti
On 28.03.19 12:15, wrote: > Did you use Russ' supplied script > /usr/share/doc/rss/examples/mkchroot.sh to create that environment? > > My contents after that script look quite different to your presented > files. > > Did you act on the logging notice after using the script, so that the > syslo

Re: chroot jail for user with rssh

2019-03-28 Thread Peter Wiersig
> ./lib/x86_64-linux-gnu/libselinux.so.1 > ./lib/x86_64-linux-gnu/libtinfo.so.5 > ./lib/x86_64-linux-gnu/libc.so.6 > ./etc > ./etc/group > ./etc/rssh.conf > ./etc/passwd > ./foo > ./usr > ./usr/bin > ./usr/bin/rssh > ./usr/bin/sftp > ./usr/bin/rsync > ./usr/bin/s

Re: chroot jail for user with rssh

2019-03-28 Thread basti
On 28.03.19 08:21, Peter Wiersig wrote: > basti writes: > >> sftp -vv u...@example.com >> Transferred: sent 2508, received 2260 bytes, in 0.2 seconds >> Bytes per second: sent 15924.1, received 14349.5 >> debug1: Exit status 1 >> Connection closed >> >> >> scp -vv u...@example.com:/foo /tmp >> Tr

Re: chroot jail for user with rssh

2019-03-28 Thread Peter Wiersig
basti writes: > sftp -vv u...@example.com > Transferred: sent 2508, received 2260 bytes, in 0.2 seconds > Bytes per second: sent 15924.1, received 14349.5 > debug1: Exit status 1 > Connection closed > > > scp -vv u...@example.com:/foo /tmp > Transferred: sent 2508, received 2304 bytes, in 0.2 sec

chroot jail for user with rssh

2019-03-27 Thread basti
hello, i try ro setup a chroot jail with rssh. the jail seem to work if I set /bin/bash as shell. (I get a prompt and can ls inside chroot) When I set /usr/bin/rssh as login shell i get: ssh u...@example.com This account is restricted by rssh. Allowed commands: scp sftp rsync sftp -vv u

Re: chrooted rssh

2010-01-28 Thread Marc Olive
El Monday 25 January 2010 10:29:32 Johannes Wiedersich va escriure: > Vadkan Jozsef wrote: > > Does someone has an easy howto for only allowing e.g.: scp with rssh > > [chrooted]? > > aptitude install scponly I have some troubles using scponly into chrooted environ

Re: chrooted rssh

2010-01-25 Thread Johannes Wiedersich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vadkan Jozsef wrote: > Does someone has an easy howto for only allowing e.g.: scp with rssh > [chrooted]? aptitude install scponly or aptitude install rssh and configure the passwd for the respective user(s) 10:18:20-johan...@e13-v21:~$ ap

chrooted rssh

2010-01-24 Thread Vadkan Jozsef
Does someone has an easy howto for only allowing e.g.: scp with rssh [chrooted]? Thanks -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Is there a work-around for a umask bug in rssh/chroot ??

2008-08-27 Thread Bob
On Aug 27, 12:50 pm, Henrique de Moraes Holschuh <[EMAIL PROTECTED]> wrote: > On Wed, 27 Aug 2008, Bob wrote: > > On Aug 27, 9:00 am, Henrique de Moraes Holschuh <[EMAIL PROTECTED]> > > wrote: > > > On Tue, 26 Aug 2008, Bob Goldberg wrote: > > > > r

Re: Is there a work-around for a umask bug in rssh/chroot ??

2008-08-27 Thread Bob
On Aug 27, 12:50 pm, Henrique de Moraes Holschuh <[EMAIL PROTECTED]> wrote: > On Wed, 27 Aug 2008, Bob wrote: > > On Aug 27, 9:00 am, Henrique de Moraes Holschuh <[EMAIL PROTECTED]> > > wrote: > > > On Tue, 26 Aug 2008, Bob Goldberg wrote: > > > > r

Re: Is there a work-around for a umask bug in rssh/chroot ??

2008-08-27 Thread Henrique de Moraes Holschuh
On Wed, 27 Aug 2008, Bob wrote: > On Aug 27, 9:00 am, Henrique de Moraes Holschuh <[EMAIL PROTECTED]> > wrote: > > On Tue, 26 Aug 2008, Bob Goldberg wrote: > > > running etch; rssh/chroot with users allowed sftp only > > > I have myumask=007 in my rssh.conf;

Re: Is there a work-around for a umask bug in rssh/chroot ??

2008-08-27 Thread Bob
On Aug 27, 9:00 am, Henrique de Moraes Holschuh <[EMAIL PROTECTED]> wrote: > On Tue, 26 Aug 2008, Bob Goldberg wrote: > > running etch; rssh/chroot with users allowed sftp only > > I have myumask=007 in my rssh.conf; I have setgid=true on all home dir's. > > > Wh

Re: Is there a work-around for a umask bug in rssh/chroot ??

2008-08-27 Thread Henrique de Moraes Holschuh
On Tue, 26 Aug 2008, Bob Goldberg wrote: > running etch; rssh/chroot with users allowed sftp only > I have my umask=007 in my rssh.conf; I have setgid=true on all home dir's. > > When a user uploads a file, that file does NOT have mode=660 as I would > expect - instead it&#

Is there a work-around for a umask bug in rssh/chroot ??

2008-08-26 Thread Bob Goldberg
running etch; rssh/chroot with users allowed sftp only I have my umask=007 in my rssh.conf; I have setgid=true on all home dir's. When a user uploads a file, that file does NOT have mode=660 as I would expect - instead it's 640. has anyone had this problem, and found a work-around? TIA Bob

Re: Can a user's default file creation mode use a group they're not a member of? (chroot/rssh issue)

2008-08-26 Thread Bob
On Aug 25, 5:30 pm, Eduardo M KALINOWSKI <[EMAIL PROTECTED]> wrote: > Bob Goldberg wrote: > > is there a way to have my users' file creation default to group=chadm > > - WITHOUT having them IN the chadm group? > > If the directories where files will be written has group=chadm and the > setgid bit

Re: Can a user's default file creation mode use a group they're not a member of? (chroot/rssh issue)

2008-08-25 Thread Eduardo M KALINOWSKI
Bob Goldberg wrote: > is there a way to have my users' file creation default to group=chadm > - WITHOUT having them IN the chadm group? If the directories where files will be written has group=chadm and the setgid bit set (set with chmod g+s PATH), then files created in that directory by default

Can a user's default file creation mode use a group they're not a member of? (chroot/rssh issue)

2008-08-25 Thread Bob Goldberg
running debian etch; Here's the background - I'm using chroot/rssh to restrict users to sftp only. my chroot jail is /home/chroot all directory modes are 700 (except the users' directory), because I don't want users to even see the names of other users' home director

rssh chroot issue

2007-10-27 Thread Bjorn Meyer
This has also been posted in the security forum. I appologize for the duplication, but I thought it might get more visibility here. I am having a problem getting rssh to set up and use the chroot path that I have identified. I am able to sftp or scp in without any problems. However, I am able to

Problem with rssh and chroot()

2007-06-04 Thread [EMAIL PROTECTED]
Hi, I've got a problem configuring rssh with a chroot jail. When I try to sftp [EMAIL PROTECTED] I get disconnected immediatly. I've used the script in /usr/share/doc/rssh/examples and configured / etc/rssh.conf like this : [EMAIL PROTECTED]:/var/log$ cat /etc/rssh.conf

Problem with rssh and chroot() (amd64 / testing)

2007-06-04 Thread Sebastien JUST
Hi, I've got a problem configuring rssh with a chroot jail. When I try to sftp [EMAIL PROTECTED] I get disconnected immediatly. I've used the script in /usr/share/doc/rssh/examples and configured /etc/rssh.conf like this : [EMAIL PROTECTED]:/var/log$ cat /etc/rssh.conf

rssh

2006-11-09 Thread Alejandro
People, I'm using rssh in order to give sftp access to the user "test", and he shouldn't go above /home/test path. So I configure /etc/rssh.conf in this way: logfacility = LOG_USER allowsftp umask = 022 user = test:011:00010:"/home/test" But the user "tes

Re: rssh, nothing happens

2005-11-05 Thread Simo Kauppi
On Fri, Nov 04, 2005 at 01:04:14AM +0100, Rakotomandimby Mihamina wrote: > Hi, Hi, > I got rssh 2.2.3 (Debian packaged) > I creatd a test user. > > $ grep test /etc/passwd > test:x:1001:1001:,,,:/home/test:/usr/bin/rssh > > This is how I configured rss

rssh, nothing happens

2005-11-03 Thread Rakotomandimby Mihamina
Hi, I got rssh 2.2.3 (Debian packaged) I creatd a test user. $ grep test /etc/passwd test:x:1001:1001:,,,:/home/test:/usr/bin/rssh This is how I configured rssh: $ cat /etc/rssh.conf logfacility = LOG_USER allowscp allowsftp #allowcvs

Re: gui sftp client (using rssh on server)

2004-09-03 Thread Stephen Tait
At 15:59 03/09/2004, you wrote: you can do something similar in konqueror. If memory serves me correctly; kio:fish://[EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: gui sftp client (using rssh on server)

2004-09-03 Thread Joe Wrigley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Diesis wrote: | Hy, | |> I've tried gFTP, but when I tick "Use SSH2 SFTP subsys" in | | | personally I run Gnome 2.6 on my NB, and I have installed the | gnome-network package. | I could use the destination "sftp://[EMAIL PROTECTED]" in the Nautilus win

Re: gui sftp client (using rssh on server)

2004-09-03 Thread Diesis
Hy, I've tried gFTP, but when I tick "Use SSH2 SFTP subsys" in personally I run Gnome 2.6 on my NB, and I have installed the gnome-network package. I could use the destination "sftp://[EMAIL PROTECTED]" in the Nautilus window and I could browse the remote host :-) -- Diesis -- To UNSUBSCRIBE, em

gui sftp client (using rssh on server)

2004-09-02 Thread Carl Devos
Hello, I've installed rssh on my server so users can only use scp and sftp. Works fine with sftp in CLI, but I can't find a Linux graphical client which works in sarge (I found FileZilla for Windows). I've tried gFTP, but when I tick "Use SSH2 SFTP subsys" in F