[scponly] scponly interactive question
Scott Johnson
scottj at insane.com
Tue Apr 15 19:09:27 EDT 2003
Thanks for the tip. Everything works exactly as I expected it to once I
removed WinSCP support. Keep up the excellent work with this project!
-Scott
At 11:34 PM 3/24/2003, wbr oblyr wrote:
>hey scott, good question. i've been wondering why no one every asked this
>question.
>
>what you're seeing is the winscp compatibility feature talking back to
>you. winscp compatibility *IS* an interactive shell. if you turn on the
>logging in winscp, you can see what winscp does when it logs in.
>
>basically, winscp (or anything pretending to be winscp) is able to issue
>commands like chown, rm, scp, etc - one after the other without logging
>out. while this may seem like this completely contracts the point of
>scponly, the only command that is allowed in winscp compatibility that is
>not allowed in the noninteractive nonwinscp mode is "cd". furthermore,
>the argument checking is not more lenient is winscp-mode than it is in
>nonwinscp mode. in fact, its the same code.
>
>but, if you're not comfortable with the distinction between an interactive
>and noninteractive shell session, you can easily disable winscp
>compatibility at compile time, like so:
>
>./configure --disable-winscp-compat
>
>then reinstall and you will find scponly is much less polite to people who
>try to ssh in.
>
>joe
>
>----
>
>PGP KEY: http://www.sublimation.org/contact.html
>PGP Key fingerprint = EC4B 0DA5 B4F6 BDDD 9176 55D6 3A6A 7D63 158F 22D2
>
>
>On Mon, 24 Mar 2003, Scott Johnson wrote:
>
> > Hello,
> >
> > I'm wondering exactly what happens when I make an interactive connection to
> > my server that is running scponly. When I connect, I get this:
> >
> > > ssh localhost
> > scottj at localhost's password:
> > Last login: Mon Mar 24 16:57:01 2003 from xxx.xxx.org
> >
> > And then, any text input in that session returns the following line:
> >
> > WinSCP: this is end-of-file:0
> >
> > Why does this happen? It would seem to me that scponly should not allow
> > this type of interactive session. What can I do to prevent this?
> >
> > Thanks,
> > Scott
> >
> >
> >
> >
> >
> > _______________________________________________
> > scponly mailing list
> > scponly at lists.ccs.neu.edu
> > https://lists.ccs.neu.edu/bin/listinfo/scponly
> >
More information about the scponly
mailing list