| View previous topic :: View next topic | 
	
	
		| Author | Message | 
	
		| keopp Senior Member
 
 
 Joined: 08 Nov 2008
 Posts: 166
 Location: Romania
 
 | 
			
				|  Posted: Sun Mar 06, 2011 8:14 pm    Post subject: /bin/false shell |   |  
				| 
 |  
				| Thank you very much for the tutorial to secure SMS. It was very helpfull since I've allready tryed to forbid ftp users shell access. I succeeded now, but after adding in /etc/shells a new line with /bin/false. 
 I also tryed /dev/null and /sbin/nologin methods but without success.... yet
  . |  | 
	
		| Back to top |  | 
	
		| keopp Senior Member
 
 
 Joined: 08 Nov 2008
 Posts: 166
 Location: Romania
 
 | 
			
				|  Posted: Sun Mar 06, 2011 8:25 pm    Post subject: |   |  
				| 
 |  
				| Too easy.... I also added /dev/null and /sbin/nologin to /etc/shells.... and voila.... it's working now....
  |  | 
	
		| Back to top |  | 
	
		| gerasimos_h Site Admin
 
 
 Joined: 09 Aug 2007
 Posts: 1757
 Location: Greece
 
 | 
			
				|  Posted: Sun Mar 06, 2011 8:40 pm    Post subject: |   |  
				| 
 |  
				| Even if you don't add bin/false in /etc/shells still ssh access are forbidden. You are getting
 
  	  | Code: |  	  | root@sms:~# ssh webftp@localhost webftp@localhost's password:
 Permission denied, please try again.
 | 
 When adding /bin/false the message change to
 
  	  | Code: |  	  | Connection to localhost closed. | 
 
 I'll add bin/false to /etc/shells though, since it seems right.
 
 Thanks
 gerasimos_h
 _________________
 Superb! Mini Server Project Manager
 http://sms.it-ccs.com
 |  | 
	
		| Back to top |  | 
	
		|  |