Hacker News new | past | comments | ask | show | jobs | submit login

Beware that this may break apps that use SSH as a transport protocol (like rsync and mercurial, depending on your setup of course).



You could set those up with separate identities authorized with forced commands, though I'm not sure how you would secure rsync from abuse.


The extended example 'should' work with those kinds of apps. The trivial example does not.


More specifically it checks for the SSH_ORIGINAL_COMMAND environment variable and executes it if it exists, thus making "ssh myhost <command>" work again.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: