Re: How to setup an read-only user account for a whole server with useradd ?

On 20 Sep, 01:24, "s. keeling" <keel...@xxxxxxxxxxx> wrote:
s. keeling <keel...@xxxxxxxxxxx>:

Carsten Eishold <bu...@xxxxxxxx>:
I want to setup an user SSH/telnet account with useradd. The user should have

- read-only permissions for ALL files on the server beginning with the root directory.

Frankly, that's a silly requirement. Re-think it.

For safe, restricted read-only access, don't use SSH. Seriously.

Rsync works well for read-only, NFS for browising in read-only if you
don't care about security, OpenAFS for more sophisticated
authentication. But SSH is an encrypted way to do logins, with hooks
to do file copies on top of that. As what is primarily a log-in
server, what you ask for is not a good fit.

.

Relevant Pages

  • Re: external harddrive w/rsync (+ssh)?
    ... NFS services. ... Some of them might run ssh, maybe, but that seems ... mount network filesystems over SMB/NFS. ... disk space can run an rsync daemon, and you can use rsync that way. ...
    (comp.os.linux.misc)
  • Re: Rsync problem - still unsolved
    ... not an ssh problem rather than an rsync problem. ... debug: client supports 1 auth methods: 'keyboard-interactive' ... Using keyboard-interactive authentication. ...
    (comp.security.ssh)
  • Re: 30GB file transfers using scp
    ... He has the horsepower in the cpus to handle ssh encryption pretty ... "Since I can't test to solarch using rsync or scp, ... cp(nfs): 4.6 sec ... Quantum materiae materietur marmota monax si marmota ...
    (SSH)
  • Re: sending large amount of data securely
    ... We mirror about 300GB worth of data accross one master and three slave servers using rsync, we do not use ssh as it's a local-only gigabit ethernet link between servers, but it's not overly difficult to accomplish in your case. ... If you do need to use ssh with rsync, then you could try out the latest openssh-portable port which now seems to support the HPN patches. ...
    (freebsd-questions)
  • Re: how to cleanup mail
    ... synchronizing directories on several 5.0.7 servers, ... One thing you could do is don't use SCO's supplied ssh or rsh as the ... don't use any ssh or rsh but use native rsync directly instead. ... you can even use the pre-digested source from the sco ftp site ...
    (comp.unix.sco.misc)