BSD Portsshells/scponly 4.8.20110526_2 MidnightBSD
Tiny shell that only permits scp and sftp
- System
- MidnightBSD
- Repository
- mports
- Maintainer
- [email protected]
- License
- bsd2
- Categories
- shells, security
Description
[Excerpted from the README:] "scponly" is an alternative "shell" (of sorts) for system administrators who would like to provide access to remote users to both read and write local files without providing any remote execution privileges. Functionally, it is best described as a wrapper to the tried-and-true ssh suite.
scponly validates remote requests by examining the third argument passed to the shell upon login. (The first argument is the shell itself, and the second is -c.) The only commands allowed are "scp", "sftp-server" and "ls". Arguments to these commands are passed along unmolested.
In the other systems
| System | Port | Version |
|---|---|---|
| MidnightBSD | shells/scponly | 4.8.20110526_2 |
| FreeBSD | shells/scponly | 4.8.20110526_8 |
| NetBSD | shells/scponly | 4.8nb2 |
| DragonFly | shells/scponly | 4.8.20110526_8 |
Install
Binary package:
mport install scponlyFrom mports:
cd /usr/mports/shells/scponly && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= scponly>0:shells/scponlyDependencies
No port depends on this one.
Configuration
Options name: shells_scponly
| Option | Default | Description |
|---|---|---|
| CHROOT | off | chroot(8) functionality |
| DEFAULT_CHDIR | off | Chdir(2) by default |
| DOCS | off | |
| GFTP | off | gftp support |
| RSYNC | off | rsync support |
| SCP | off | vanilla scp support |
| SUBVERSION | off | |
| SVNSERVE | off | Subversion support for svn+ssh:// |
| UNISON | off | Unisson support |
| WILDCARDS | on | Wildcards processing |
| WINSCP | off | WinSCP support |
- USES
- cpe tar:tgz
- Service scripts
- none
Files
Manual pages 1
- scponly(8)
pkg-plist 17
- @shell bin/scponly
- @exec echo ""
- @exec echo "To setup chroot cage, run the following commands:"
- @exec echo " 1) cd %%PREFIX%%/share/examples/scponly/ && /bin/sh setup_chroot.sh"
- @exec echo " 2) Set scponlyc_enable=\"YES\" in /etc/rc.conf"
- @exec echo " 3) Run %%PREFIX%%/etc/rc.d/scponly start"
- @exec echo ""
- @exec echo "For information on several potential security concerns,"
- @exec echo "please read:"
- @exec echo "%%PREFIX%%/share/doc/scponly/SECURITY"
- @shell sbin/scponlyc
- share/examples/scponly/setup_chroot.sh
- share/examples/scponly/config.h
- etc/scponly/debuglevel
- @dirrm etc/scponly
- @dirrm share/examples/scponly
- share/man/man8/scponly.8.gz
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| scponly-20110526.tgz | 116147 | 46aac15a277a86ae43add03b4480150ac65830c7f0ef683532d383ba93dd7b03 |
Master sites 1
- SF/scponly/scponly-snapshots