[scponly] scponly 4.2 released (IMPORTANT SECURITY FIXES)

csnyder chsnyder at gmail.com
Thu Dec 22 11:54:25 EST 2005


On 12/22/05, user <user at dhp.com> wrote:

> > Fix:
> > The new release of scponly-4.2:
> >  - uses getopt to process the arguments to scp and rsync.
> >  - does not support rsync or scp by default
>
>
> So ... do I understand correctly - the scponly shell does not support scp
> by default anymore ?
>
> If the default does not support scp and rsync, does that mean 0% of all
> scponly admins will ever install the default ?  What would you do with the
> default install ?
>

... and maybe it should be named "sftponly" now?

I believe in "secure by default" but this seems like it might be
taking it a little too far. Is disabling scp really the only way to
accomplish this?


More information about the scponly mailing list