On Thu, Apr 28, 2005 at 04:06:47PM +0100, Barry O'Donovan wrote:
> On Thu, 28 Apr 2005, Conor Wynne wrote:
> Some details I didn't go into in the article were to be sure to use a
> specific key for only this purpose and use a restricted account on the
> remote server (such as setting the shell to rbash - see man bash and look
> for RESTRICTED SHELL).
You can restrict what commands an ssh account can run in the ssh public
key. This is how some of our more important projects (like Debian,
FreshRPMS, and a few more) push us updates.
The key looks like;
no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,command="/home/ximian/rsync-ximian
-nolog &" ssh-dss <key data> <username at blah>
So, if you create a passwordless public key like so, and just change
the command to whatver rsync runs.
--
Colm MacCárthaigh Public Key: colm+pgp at stdlib.net
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
