Allow only to lend a port and modify ~/.ssh/authorized_keys #51

Open
opened 2024-12-18 18:00:27 +01:00 by Benjamin_Loison · 4 comments

Could help at work to let users add devices able to access their laptops for instance it seems.

Something maybe like a disabled shell but SFTP access authorized only for seeing and modifying this file.

Related to #35.

Could help at work to let users add devices able to access their laptops for instance it seems. Something maybe like a disabled shell but SFTP access authorized only for seeing and modifying this file. Related to #35.
Author
Owner
Tracked at [Benjamin_Loison/openssh/issues/44](https://salsa.debian.org/Benjamin_Loison/openssh/-/issues/44).
Author
Owner
Related to [Benjamin_Loison/FileZilla/issues/25](https://codeberg.org/Benjamin_Loison/FileZilla/issues/25).
Author
Owner

Should be able to access ~/.ssh/authorized_keys through SSH key authentication.

wiki.archlinux.org: SFTP server#Fixing path for authorized keys (792514) may help.

I was thinking about only giving sub file configuration write access, to avoid revoking original access but it may be wanted.

Should be able to access `~/.ssh/authorized_keys` through SSH key authentication. [wiki.archlinux.org: SFTP server#Fixing path for authorized keys (792514)](https://wiki.archlinux.org/index.php?title=SFTP_chroot&oldid=792514#Fixing_path_for_authorized_keys) may help. I was thinking about only giving sub file configuration write access, to avoid revoking original access but it may be wanted.
Author
Owner
See the message:
-----BEGIN PGP MESSAGE-----

hF4DTQa9Wom5MBgSAQdAdK7m9f8GH7P6oSi1Wx3SmWETs31LS23yCeQiCLanqXkw
xrj1WADYvB+Fvwie0MXYZpjFiC6VpBR2/hO4s3O9bLXRcMIjQq0PMbTkSXjD3dP2
0qoBMpJw/aNJKW1FhauJiDd4J1gFbDvbe3xrWsdSxighph7mvuZg7md7L8Zd99fi
5QE5sPbrG4RZxfcO7WfLJ83mhSCh6jeNbERg394QYWbpHLtDUj1SH2kMNEMdK3ue
ja42WLaCKVjC+P6umkOyR6rdHWF8s9musoJ/aayCdLB7jyHtfX+KCniYXAy4/JNa
zNfo5m9qQa9SGz6ucTtnbHonwnz3TVr7ZksjtQ==
=VzOy
-----END PGP MESSAGE-----
<details> <summary>See the message:</summary> ``` -----BEGIN PGP MESSAGE----- hF4DTQa9Wom5MBgSAQdAdK7m9f8GH7P6oSi1Wx3SmWETs31LS23yCeQiCLanqXkw xrj1WADYvB+Fvwie0MXYZpjFiC6VpBR2/hO4s3O9bLXRcMIjQq0PMbTkSXjD3dP2 0qoBMpJw/aNJKW1FhauJiDd4J1gFbDvbe3xrWsdSxighph7mvuZg7md7L8Zd99fi 5QE5sPbrG4RZxfcO7WfLJ83mhSCh6jeNbERg394QYWbpHLtDUj1SH2kMNEMdK3ue ja42WLaCKVjC+P6umkOyR6rdHWF8s9musoJ/aayCdLB7jyHtfX+KCniYXAy4/JNa zNfo5m9qQa9SGz6ucTtnbHonwnz3TVr7ZksjtQ== =VzOy -----END PGP MESSAGE----- ``` </details>
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Benjamin_Loison/linux#51
No description provided.