<![CDATA[Latest posts for the topic "利用scponly限制帳號只能SCP或SFTP不能SSH登入"]]> https://forum.andowson.com/posts/list/16.page JForum - http://www.jforum.net 利用scponly限制帳號只能SCP或SFTP不能SSH登入
搜尋了一下網路發現可以透故scponly這個套件來達成，首先可以透過下列網址安裝對應發行版本的epel套件
http://dl.fedoraproject.org/pub/epel/

例如
RHEL 6/CentOS 6
[code]rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm[/code]
RHEL 5/CentOS 5
[code]rpm -ivh http://dl.fedoraproject.org/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm[/code]

然後再透過yum安裝scponly
[code]yum install scponly[/code]

安裝完成後將介面帳號的shell修改為/usr/bin/scponly，例如將user1的shell修改為scponly
[code]usermod -s /usr/bin/scponly user1[/code]

然後再利用WinSCP或FileZilla等工具程式確認是否可以正常SCP或SFTP
]]> https://forum.andowson.com/posts/preList/639/1332.page https://forum.andowson.com/posts/preList/639/1332.page GMT