From owner-freebsd-security  Tue Feb 27 15: 2: 0 2001
Delivered-To: freebsd-security@freebsd.org
Received: from rapidnet.com (rapidnet.com [205.164.216.1])
	by hub.freebsd.org (Postfix) with ESMTP id D6E7437B718
	for <freebsd-security@FreeBSD.ORG>; Tue, 27 Feb 2001 15:01:55 -0800 (PST)
	(envelope-from traviso@RapidNet.com)
Received: from localhost (traviso@localhost)
	by rapidnet.com (8.9.3/8.9.3) with ESMTP id QAA08186;
	Tue, 27 Feb 2001 16:01:31 -0700 (MST)
Date: Tue, 27 Feb 2001 16:01:31 -0700 (MST)
From: "Travis [Admin Team]" <traviso@RapidNet.com>
To: Brooks Davis <brooks@one-eyed-alien.net>
Cc: Rob Simmons <rsimmons@wlcg.com>,
	George.Giles@mcmail.vanderbilt.edu, freebsd-security@FreeBSD.ORG
Subject: Re: ftp access
In-Reply-To: <20010227145512.A13920@Odin.AC.HMC.Edu>
Message-ID: <Pine.BSF.4.21.0102271600160.94022-100000@rapidnet.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Tue, 27 Feb 2001, Brooks Davis wrote:

> If you do this be sure to keep users from being able to access the system
> via ssh.  Otherwise they can just use ssh to spawn a shell for themselves:
> 
> ssh -t <host> /bin/sh

	Course I believe you disable it with a -T doncha? >;)

Travis

/*
-=[ Travis Ogden ]-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
RapidNet Admin Team   "Courage is not defined by those who
Phone#: 605.341.3283   fought and did not fall, but by those
ICQ#:	30220771       who fought, fell, and rose again."

Mail: 	traviso@RapidNet.com		Fax#:	605.348.1031
Web:	www.RapidNet.com/~traviso	800#: 	800.763.2525	

ATTENTION! "RapidNet has moved to 330 Knollwood Drive, 
Rapid City, SD 57701."
-=-=-=-=-=-=-=-=-=-=-=-=-=-[ traviso@rapidnet.com ]=-=-=-=-=
*/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message