shells/scponly 4.8.20110526_8
Tiny shell that only permits scp and sftp
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- BSD2CLAUSE
- Categories
- shells, security
- Package size
- 23.6 KiB, 51.6 KiB installed
Description
[Excerpted from the README:] "scponly" is an alternative "shell" (of sorts) for system administrators who would like to provide access to remote users to both read and write local files without providing any remote execution privileges. Functionally, it is best described as a wrapper to the tried-and-true ssh suite.
scponly validates remote requests by examining the third argument passed to the shell upon login. (The first argument is the shell itself, and the second is -c.) The only commands allowed are "scp", "sftp-server" and "ls". Arguments to these commands are passed along unmolested.
Install
As a binary package — by origin, or by package name:
pkg install shells/scponly
pkg install scponlyFrom the ports tree:
cd /usr/ports/shells/scponly/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= scponly>0:shells/scponlyPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 4.8.20110526_8 | 4.8.20110526_8 | 4.8.20110526_5 | 4.8.20110526_8 | 4.8.20110526_8 |
| FreeBSD:14:quarterly | 4.8.20110526_8 | 4.8.20110526_8 | n/a | 4.8.20110526_8 | 4.8.20110526_8 |
| FreeBSD:15:latest | 4.8.20110526_8 | 4.8.20110526_8 | n/a | 4.8.20110526_8 | 4.8.20110526_8 |
| FreeBSD:15:quarterly | 4.8.20110526_8 | 4.8.20110526_8 | n/a | n/a | n/a |
| FreeBSD:16:latest | 4.8.20110526_8 | 4.8.20110526_8 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
The Makefile names none itself; they come from USES and USE_*.
The full lists below include those, and their dependencies in turn.
No port depends on this one.
Configuration
Options name: shells_scponly
| Option | Default | Description |
|---|---|---|
| CHROOT | off | chroot(8) functionality |
| DEFAULT_CHDIR | off | Chdir(2) by default |
| DOCS | off | Build and/or install documentation |
| GFTP | off | gftp support |
| RSYNC | off | rsync support |
| SCP | off | vanilla scp support |
| SUBVERSION | off | Subversion version control support |
| SVNSERVE | off | Subversion support for svn+ssh:// |
| UNISON | off | Unisson support |
| WILDCARDS | on | Wildcards processing |
| WINSCP | off | WinSCP support |
- USES
- cpe tar:tgz
- Service scripts
- none
Files
Manual pages 1
- scponly(8)
pkg-plist 15
- @shell bin/scponly
- @exec echo ""
- @exec echo "To setup chroot cage, run the following commands:"
- @exec echo " 1) cd %%PREFIX%%/share/examples/scponly/ && /bin/sh setup_chroot.sh"
- @exec echo " 2) Set scponlyc_enable=\"YES\" in /etc/rc.conf"
- @exec echo " 3) Run %%PREFIX%%/etc/rc.d/scponly start"
- @exec echo ""
- @exec echo "For information on several potential security concerns,"
- @exec echo "please read:"
- @exec echo "%%PREFIX%%/share/doc/scponly/SECURITY"
- @shell sbin/scponlyc
- share/examples/scponly/setup_chroot.sh
- share/examples/scponly/config.h
- etc/scponly/debuglevel
- share/man/man8/scponly.8.gz
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| scponly-20110526.tgz | 116147 | 46aac15a277a86ae43add03b4480150ac65830c7f0ef683532d383ba93dd7b03 |
Master sites 1
- SF/scponly/scponly-snapshots
Commit history 0
No commits in the history this site was built from.