suggestion for the restricted ssh shell

[John Abreau]

Derek; 

In regards to the dummy shell you wrote that restricts itself to scp and
sftp-server commands, it might be useful to also permit imapd and popd.
I use fetchmail through an ssh tunnel, where it invokes imapd in
preauth mode. Here's what I have in my .fetchmailrc:

    poll asgard with proto IMAP auth ssh
        plugin 'ssh %h /usr/sbin/imapd'


-- 
John Abreau / Executive Director, Boston Linux & Unix 
ICQ 28611923 / AIM abreauj / JABBER jabr at jabber.org / YAHOO abreauj
Email jabr at blu.org / WWW http://www.abreau.net / PGP-Key-ID 0xD5C7B5D9
PGP-Key-Fingerprint 72 FB 39 4F 3C 3B D6 5B E0 C8 5A 6E F1 2C BE 99

   Some people say, "The enemy of my enemy is my friend."
   I often respond, "When elephants fight, it's the grass
   that gets trampled."



-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 344 bytes
Desc: not available
Url : http://mail.gnhlug.org/mailman/private/gnhlug-discuss/attachments/20020818/95667c9c/attachment.bin