[ILUG] Fedora at heanet

[Colm MacCarthaigh]

On Thu, Apr 28, 2005 at 04:06:47PM +0100, Barry O'Donovan wrote:
> On Thu, 28 Apr 2005, Conor Wynne wrote:
> Some details I didn't go into in the article were to be sure to use a 
> specific key for only this purpose and use a restricted account on the 
> remote server (such as setting the shell to rbash - see man bash and look 
> for RESTRICTED SHELL).

You can restrict what commands an ssh account can run in the ssh public
key. This is how some of our more important projects (like Debian,
FreshRPMS, and a few more) push us updates.

The key looks like;

no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,command="/home/ximian/rsync-ximian
-nolog &" ssh-dss <key data> <username at blah>

So, if you create a passwordless public key like so, and just change
the command to whatver rsync runs.

-- 
Colm MacCárthaigh                        Public Key: colm+pgp at stdlib.net