Re: Building 2.6.10 kernel for Debian and ncurses
From: Nico Kadel-Garcia (nkadel_at_comcast.net)
Date: Sun, 23 Jan 2005 10:02:46 -0500
"John Beardmore" <firstname.lastname@example.org> wrote in message
> In message <email@example.com>, Andy Fraser
> <firstname.lastname@example.org> writes
>>In comp.os.linux.setup, John Beardmore uttered these immortal words:
>>>>>On Debian you want the libncurses5-dev package.
>>> Is there a general way to find the precise name of an available package
>>> from the generic name of the facility ?
>>> Let's say I want to track down Scp Only for example. How could I check
>>> if it was available through apt ?
>>scp is part of SSH so apt-file will help there. You'll probably need to
> Yes, but I don't think that ScpOnly, see
> http://www.sublimation.org/scponly/, is part of the standard ssh/scp
> packages which are already installed and work fine.
> I'm interested in ScpOnly as a login shell because I have large numbers of
> people that get access to user IDs and passwords for our machines to
> exchange large numbers of small files, and I don't want them to be able to
> log in and poke about.
> I just wondered if it was available as an apt package, but apt cache seems
> to suggest not, so I've downloaded and compiled it.
1: If you're going that route, you really want chroot cages. Look over at
sourceforge.net for available chroot tools for SSH. I used to publish
patches to do that, but got busy with other projects and the OpenSSH authors
have consistently rejected the patches for various policy reasons. But it's
consistently turned out to be the right thing to do, since restricting user
access once they've SSH'ed in has otherwise turned out to be quite
difficult. I highly recommend Richard Silverman's book on SSH, and hopping
over to the SSH newsgroups for more details.
2: If you don't need to actually give them shells, and just want them to
securely exchange files without shell access, look into WebDAV running under
Apache using HTTPS. I've used it extremely effecively for exactly that sort
of access, and graphical drag&drop is built into Windows, the Konqueror web
browser, and published Java widgets for other OS's.