Re: [cobalt-security] Quick security guide

[Michael Stauber <cobalt@xxxxxxxxxxxxxx>]

Hi Eugene,

> It obviously depends on particular case: if you have *already*
> given shell access to your users for some other reason than the
> answer is obvious.  If not, it depends.

Yepp, it depends. I had given many users shell access in the past and when I 
did away with that I simply typed the following into the shell ...

last|grep pts|grep -v admin

.. to see which other users than admin ever had used their shell access. In 
the end I came up with only five or six unique user names which belong to 
people that I trust. For the rest I did away with shell access and never had 
a single complaint. ;o)

> I guess I sould mention this option.  Can you give me URLs?

Not really. I looked at several of Secure FTP implementations in the past, 
but haven't tried any of 'em out on a Cobalt. 

Just use Google to search for the term "Secure FTP" to find a few references:

http://www.google.com/search?q=Secure%20FTP

-- 

With best regards,

Michael Stauber
mstauber@xxxxxxxxxxxxxx
Unix/Linux Support Engineer