Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an OpenSolaris 2009.06 server and I'd like to enable a user to remotely change files in a specific directory, ideally via SFTP or FTP-via-SSH. This user does not yet have an account on the machine and I'd like to create it so it's as restricted as possible. Is there a canonical way of doing this? I know about OpenSolaris' role-based access control and authorizations model, but I figure it's a lot of work (i.e., a lot I can mess up) to really lock down a full-blown user account (prevent fork bombs, make sure there's really no other file in the file system which can be written to...). Any hint is greatly appreciated.

Thanks, Simon

share|improve this question
up vote 1 down vote accepted

rssh is probably what you want.

It's a restricted shell with just enough functionality for file transfers and nothing else.

share|improve this answer
You might need to wait for the next OpenSolaris release (2010.xx) or switch to the developement build to get rssh support as it was integrated in build 112 and 2009.06 is build 111b if I recall properly. – jlliagre Apr 29 '10 at 14:38
rssh looks great, thanks! – Simon Apr 30 '10 at 16:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.